Sumologic - ResolveAI

The Sumologic integration can be configured via Resolve’s UI or on the Resolve Satellite.

Private Network Access? If your Sumo Logic instance requires private network access, you can use the Resolve Satellite to securely proxy queries. See the Satellite Setup section below.

Prerequisite

You will need a Sumologic API Endpoint. Your API Endpoint depends on your Sumologic deployment: https://help.sumologic.com/docs/api/getting-started/#sumo-logic-endpoints-by-deployment-and-firewall-security You also need a Sumologic Access ID and Access Key. Follow the instructions from the official Sumologic documentation for how to generate them: https://help.sumologic.com/docs/manage/security/access-keys/#create-an-access-key

Ensure that at least the following scopes are granted to the token: Run Log Search, Run Metric Search, View Monitors. If you plan to use Mitigation Actions to create muting schedules during investigations, also ensure write access to the Muting Schedules API.

Ensure you copy and save the Access ID and Access Key to enter it in the Resolve UI.

Setup the Sumologic integration in ResolveAI

Select Sumologic

Select “Sumologic” from the list. Click “Add Connection” at the top right.

Name the integration

Give the integration a name, e.g.: Sumologic-Main

Enter the environments

Enter the environments as specified in the Resolve Satellite installation that the integeration will map to.Each environment should be entered in a separate row.

Enter the API Endpoint and credentials

Put the API Endpoint, Access ID and Access Key from the previous step. Select your SumoLogic API Endpoint from the dropdown.

Save

Click “Save”.

Connect Via Satellite

If your Sumo Logic instance requires private network access, use the Resolve Satellite to securely proxy queries.

Prerequisite: The Resolve Satellite should already be installed in your environment. See Resolve Satellite for installation instructions.

1. Create Kubernetes Secret

Create a Kubernetes secret containing your Sumo Logic credentials.

secret creation

apiVersion: v1
kind: Secret
type: Opaque
metadata:
  name: sumologic-resolve-credentials
stringData:
  accessId: "<your Sumo Logic Access ID>"
  accessKey: "<your Sumo Logic Access Key>"

Apply the secret:

apply secret

kubectl apply -f sumologic-resolve-credentials.yml

2. Update Values File

Add the Sumo Logic integration to your resolve-values.yaml:

resolve-values.yaml

integrations:
  sumologicOnPrem:
    type: sumologic
    create: true
    secretName: "sumologic-resolve-credentials"
    connection:
      url: "https://api.us2.sumologic.com"  # Your Sumo Logic API endpoint

3. Apply Changes

Update the satellite with the new configuration:

helm upgrade --install resolve-satellite \
  oci://registry-1.docker.io/resolveaihq/satellite-chart \
  --values resolve-values.yaml

4. Verify Integration

Open the Sumo Logic Integration page in Resolve to verify the connection.

​Prerequisite

​Setup the Sumologic integration in ResolveAI

​Connect Via Satellite

​1. Create Kubernetes Secret

​2. Update Values File

​3. Apply Changes

​4. Verify Integration

Prerequisite

Setup the Sumologic integration in ResolveAI

Connect Via Satellite

1. Create Kubernetes Secret

2. Update Values File

3. Apply Changes

4. Verify Integration