Sumo Logic n8n Node

Interact with the Sumo Logic platform to manage apps, connections, scheduled views, lookup tables, partitions, users, roles, content folders, and data forwarding rules.

Installation

In your n8n instance, go to Settings > Community Nodes and install:

@zackrobertstech/n8n-nodes-sumo-logic

Compatibility

• n8n version: >=1.0.0
• Node.js version: >=18

Credentials

Configure your Sumo Logic API credentials in n8n.

Resources & Operations

Base URL: https://api.us2.sumologic.com/api/

Access Key Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/accessKeys | List all access keys. | | 🟢 POST /v1/accessKeys | Create an access key. | | 🟡 PUT /v1/accessKeys/{id} | Update an access key. | | 🔴 DELETE /v1/accessKeys/{id} | Delete an access key. | | 🟡 PUT /v1/accessKeys/{id}/rotate | Rotate the access key secret | | 🔵 GET /v1/accessKeys/personal | List personal keys. | | 🔵 GET /v1/accessKeys/scopes | Get all scopes. |

Account Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/account/accountOwner | Get the owner of an account. | | 🔵 GET /v1/account/status | Get overview of the account status. | | 🔵 GET /v1/account/subdomain | Get the configured subdomain. | | 🟢 POST /v1/account/subdomain | Create account subdomain. | | 🟡 PUT /v1/account/subdomain | Update account subdomain. | | 🔴 DELETE /v1/account/subdomain | Delete the configured subdomain. | | 🟢 POST /v1/account/subdomain/recover | Recover subdomains for a user. | | 🟢 POST /v1/account/usage/report | Export credits usage details as CSV. | | 🔵 GET /v1/account/usage/report/{jobId}/status | Get report generation status. | | 🔵 GET /v1/account/usageForecast | Get usage forecast with respect to last number of days specified. | | 🔵 GET /v1/plan/pendingUpdateRequest | Get the pending plan update request, if any. | | 🔴 DELETE /v1/plan/pendingUpdateRequest | Delete the pending plan update request, if any. |

App Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/apps | List available apps. | | 🔵 GET /v1/apps/{uuid} | Get an app by UUID. | | 🟢 POST /v1/apps/{uuid}/install | Install an app by UUID. | | 🔵 GET /v1/apps/install/{jobId}/status | App install job status. |

App Management V2

| Endpoint | Description | |---|---| | 🔵 GET /v2/apps | List apps | | 🔵 GET /v2/apps/{uuid}/details | Get details of an app version. | | 🟢 POST /v2/apps/{uuid}/install | Start app install job | | 🔵 GET /v2/apps/{uuid}/subscription | Get subscription status for the user | | 🟢 POST /v2/apps/{uuid}/subscription | Subscribe to an app upgrade notification | | 🔴 DELETE /v2/apps/{uuid}/subscription | Unsubscribe from an app upgrade notification | | 🟢 POST /v2/apps/{uuid}/uninstall | Start app uninstall job | | 🟢 POST /v2/apps/{uuid}/upgrade | Start app upgrade job | | 🔵 GET /v2/apps/install/{jobId}/status | App install job status | | 🔵 GET /v2/apps/uninstall/{jobId}/status | App uninstall job status | | 🔵 GET /v2/apps/upgrade/{jobId}/status | App upgrade job status |

Archive Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/archive/{sourceId}/jobs | Get ingestion jobs for an Archive Source. | | 🟢 POST /v1/archive/{sourceId}/jobs | Create an ingestion job. | | 🔴 DELETE /v1/archive/{sourceId}/jobs/{id} | Delete an ingestion job. | | 🔵 GET /v1/archive/jobs/count | List ingestion jobs for all Archive Sources. |

Budget Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/budgets | Get budgets | | 🟢 POST /v1/budgets | Creates a budget definition | | 🔵 GET /v1/budgets/{budgetId} | Get budget | | 🟡 PUT /v1/budgets/{budgetId} | Update budget | | 🔴 DELETE /v1/budgets/{budgetId} | Delete budget | | 🔵 GET /v1/budgets/{budgetId}/usage | Get budget usage | | 🔵 GET /v1/budgets/usage | Get budget usages |

Connection Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/connections | Get a list of connections. | | 🟢 POST /v1/connections | Create a new connection. | | 🔵 GET /v1/connections/{id} | Get a connection. | | 🟡 PUT /v1/connections/{id} | Update a connection. | | 🔴 DELETE /v1/connections/{id} | Delete a connection. | | 🟢 POST /v1/connections/incidentTemplates | Get incident templates for CloudSOAR connections. | | 🟢 POST /v1/connections/test | Test a new connection url. |

Content Management

| Endpoint | Description | |---|---| | 🔵 GET /v2/content/{contentId}/export/{jobId}/result | Content export job result. | | 🔵 GET /v2/content/{contentId}/export/{jobId}/status | Content export job status. | | 🔵 GET /v2/content/{contentId}/path | Get path of an item. | | 🟢 POST /v2/content/{id}/copy | Start a content copy job. | | 🔵 GET /v2/content/{id}/copy/{jobId}/status | Content copy job status. | | 🔴 DELETE /v2/content/{id}/delete | Start a content deletion job. | | 🔵 GET /v2/content/{id}/delete/{jobId}/status | Content deletion job status. | | 🟢 POST /v2/content/{id}/export | Start a content export job. | | 🟢 POST /v2/content/{id}/move | Move an item. | | 🟢 POST /v2/content/folders/{folderId}/import | Start a content import job. | | 🔵 GET /v2/content/folders/{folderId}/import/{jobId}/result | Content import job result. | | 🔵 GET /v2/content/folders/{folderId}/import/{jobId}/status | Content import job status. | | 🔵 GET /v2/content/path | Get content item by path. |

Content Permissions

| Endpoint | Description | |---|---| | 🔵 GET /v2/content/{id}/permissions | Get permissions of a content item | | 🟡 PUT /v2/content/{id}/permissions/add | Add permissions to a content item. | | 🟡 PUT /v2/content/{id}/permissions/remove | Remove permissions from a content item. |

Dashboard Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/dashboards/reportSchedules | List all dashboard report schedules. | | 🟢 POST /v1/dashboards/reportSchedules | Schedule dashboard report | | 🔵 GET /v1/dashboards/reportSchedules/{scheduleId} | Get dashboard report schedule. | | 🟡 PUT /v1/dashboards/reportSchedules/{scheduleId} | Update dashboard report schedule. | | 🔴 DELETE /v1/dashboards/reportSchedules/{scheduleId} | Delete dashboard report schedule. | | 🔵 GET /v2/dashboards | List all dashboards. | | 🟢 POST /v2/dashboards | Create a new dashboard. | | 🔵 GET /v2/dashboards/{id} | Get a dashboard. | | 🟡 PUT /v2/dashboards/{id} | Update a dashboard. | | 🔴 DELETE /v2/dashboards/{id} | Delete a dashboard. | | 🟢 POST /v2/dashboards/migrate | Migrate Legacy Dashboards to Dashboards(New) | | 🔵 GET /v2/dashboards/migrate/{jobId}/result | Get dashboard migration result. | | 🔵 GET /v2/dashboards/migrate/{jobId}/status | Get dashboard migration status. | | 🟢 POST /v2/dashboards/migrate/preview | Preview of Migrating Legacy Dashboards to Dashboards(New) | | 🟢 POST /v2/dashboards/reportJobs | Start a report job | | 🔵 GET /v2/dashboards/reportJobs/{jobId}/result | Get report generation job result | | 🔵 GET /v2/dashboards/reportJobs/{jobId}/status | Get report generation job status |

Data Archiving Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/dataarchiving/destinations | Get all data archiving destinations. | | 🟢 POST /v1/dataarchiving/destinations | Create a data archiving destination. | | 🔵 GET /v1/dataarchiving/destinations/{id} | Get a data archiving destination. | | 🟡 PUT /v1/dataarchiving/destinations/{id} | Update a data archiving destination. | | 🔴 DELETE /v1/dataarchiving/destinations/{id} | Delete a data archiving destination. |

Data Deletion Rules

| Endpoint | Description | |---|---| | 🔵 GET /v1/dataDeletionRules | Get a list of Data Deletion Rules | | 🟢 POST /v1/dataDeletionRules | Create a new Data Deletion Rule | | 🔵 GET /v1/dataDeletionRules/{id} | Get Data Deletion Rule information for the given Id. | | 🟢 POST /v1/dataDeletionRules/{id}/cancel | Cancel the data Deletion Rule with the given Id. | | 🔴 DELETE /v1/dataDeletionRules/{id}/delete | Delete the data Deletion Rule with the given Id. |

Data Masking Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/dataMaskingRules | Get a list of data masking rules. | | 🟢 POST /v1/dataMaskingRules | Create a new data masking rule. | | 🔵 GET /v1/dataMaskingRules/{id} | Get a data masking rule. | | 🟡 PUT /v1/dataMaskingRules/{id} | Update a data masking rule. | | 🔴 DELETE /v1/dataMaskingRules/{id} | Delete a data masking rule. | | 🟢 POST /v1/dataMaskingRules/evaluate | Test and preview a regex pattern by evaluating it against sample input text. Optionally provide a maskString to use as the replacement for text that matches the regex. |

Dynamic Parsing Rule Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/dynamicParsingRules | Get a list of dynamic parsing rules. | | 🟢 POST /v1/dynamicParsingRules | Create a new dynamic parsing rule. | | 🔵 GET /v1/dynamicParsingRules/{id} | Get a dynamic parsing rule. | | 🟡 PUT /v1/dynamicParsingRules/{id} | Update a dynamic parsing rule. | | 🔴 DELETE /v1/dynamicParsingRules/{id} | Delete a dynamic parsing rule. |

Event Analytics

| Endpoint | Description | |---|---| | 🔵 GET /v1/eventExtractionRules | Get all event extraction rules. | | 🟢 POST /v1/eventExtractionRules | Create event extraction rule. | | 🔵 GET /v1/eventExtractionRules/{id} | Get an event extraction rule. | | 🟡 PUT /v1/eventExtractionRules/{id} | Update an event extraction rule. | | 🔴 DELETE /v1/eventExtractionRules/{id} | Delete an event extraction rule. | | 🔵 GET /v1/eventExtractionRules/quota | Get event extraction rules quota. |

Extraction Rule Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/extractionRules | Get a list of field extraction rules. | | 🟢 POST /v1/extractionRules | Create a new field extraction rule. | | 🔵 GET /v1/extractionRules/{id} | Get a field extraction rule. | | 🟡 PUT /v1/extractionRules/{id} | Update a field extraction rule. | | 🔴 DELETE /v1/extractionRules/{id} | Delete a field extraction rule. |

Field Management V1

| Endpoint | Description | |---|---| | 🔵 GET /v1/fields | Get a list of all custom fields. | | 🟢 POST /v1/fields | Create a new field. | | 🔵 GET /v1/fields/{id} | Get a custom field. | | 🔴 DELETE /v1/fields/{id} | Delete a custom field. | | 🔴 DELETE /v1/fields/{id}/disable | Disable a custom field. | | 🟡 PUT /v1/fields/{id}/enable | Enable custom field with a specified identifier. | | 🔵 GET /v1/fields/builtin | Get a list of built-in fields. | | 🔵 GET /v1/fields/builtin/{id} | Get a built-in field. | | 🔵 GET /v1/fields/dropped | Get a list of dropped fields. | | 🔵 GET /v1/fields/quota | Get capacity information. |

Folder Management

| Endpoint | Description | |---|---| | 🟢 POST /v2/content/folders | Create a new folder. | | 🔵 GET /v2/content/folders/{id} | Get a folder. | | 🟡 PUT /v2/content/folders/{id} | Update a folder. | | 🔵 GET /v2/content/folders/adminRecommended | Schedule Admin Recommended folder job | | 🔵 GET /v2/content/folders/adminRecommended/{jobId}/result | Get Admin Recommended folder job result | | 🔵 GET /v2/content/folders/adminRecommended/{jobId}/status | Get Admin Recommended folder job status | | 🔵 GET /v2/content/folders/global | Schedule Global View job | | 🔵 GET /v2/content/folders/global/{jobId}/result | Get Global View job result | | 🔵 GET /v2/content/folders/global/{jobId}/status | Get Global View job status | | 🔵 GET /v2/content/folders/installedApps | Schedule Installed Apps folder job | | 🔵 GET /v2/content/folders/installedApps/{jobId}/result | Get Installed Apps folder job result | | 🔵 GET /v2/content/folders/installedApps/{jobId}/status | Get Installed Apps folder job status | | 🔵 GET /v2/content/folders/personal | Get personal folder. |

Health Events

| Endpoint | Description | |---|---| | 🔵 GET /v1/healthEvents | Get a list of health events. | | 🟢 POST /v1/healthEvents/resources | Health events for specific resources. |

Ingest Budget Management V2

| Endpoint | Description | |---|---| | 🔵 GET /v2/ingestBudgets | Get a list of ingest budgets. | | 🟢 POST /v2/ingestBudgets | Create a new ingest budget. | | 🔵 GET /v2/ingestBudgets/{id} | Get an ingest budget. | | 🟡 PUT /v2/ingestBudgets/{id} | Update an ingest budget. | | 🔴 DELETE /v2/ingestBudgets/{id} | Delete an ingest budget. | | 🟢 POST /v2/ingestBudgets/{id}/usage/reset | Reset usage. |

Log Searches Estimated Usage

| Endpoint | Description | |---|---| | 🟢 POST /v1/logSearches/estimatedUsage | Gets estimated usage details. | | 🟢 POST /v1/logSearches/estimatedUsageByMeteringType | Gets estimated usage details per metering type. | | 🟢 POST /v1/logSearches/estimatedUsageByTier | Gets Tier Wise estimated usage details. | | 🟢 POST /v1/logSearches/estimatedUsageByView | Gets estimated usage details per view. |

Log Searches Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/logSearches | List all saved log searches. | | 🟢 POST /v1/logSearches | Save a log search. | | 🔵 GET /v1/logSearches/{id} | Get the saved log search. | | 🟡 PUT /v1/logSearches/{id} | Update the saved log Search. | | 🔴 DELETE /v1/logSearches/{id} | Delete the saved log search. |

Logs Data Forwarding Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/logsDataForwarding/destinations | Get Amazon S3 data forwarding destinations. | | 🟢 POST /v1/logsDataForwarding/destinations | Create an S3 data forwarding destination. | | 🔵 GET /v1/logsDataForwarding/destinations/{id} | Get an S3 data forwarding destination. | | 🟡 PUT /v1/logsDataForwarding/destinations/{id} | Update an S3 data forwarding destination. | | 🔴 DELETE /v1/logsDataForwarding/destinations/{id} | Delete an S3 data forwarding destination. | | 🔵 GET /v1/logsDataForwarding/rules | Get all S3 data forwarding rules. | | 🟢 POST /v1/logsDataForwarding/rules | Create an S3 data forwarding rule. | | 🔵 GET /v1/logsDataForwarding/rules/{indexId} | Get an S3 data forwarding rule by its index. | | 🟡 PUT /v1/logsDataForwarding/rules/{indexId} | Update an S3 data forwarding rule by its index. | | 🔴 DELETE /v1/logsDataForwarding/rules/{indexId} | Delete an S3 data forwarding rule by its index. |

Lookup Management

| Endpoint | Description | |---|---| | 🟢 POST /v1/lookupTables | Create a lookup table. | | 🔵 GET /v1/lookupTables/{id} | Get a lookup table. | | 🟡 PUT /v1/lookupTables/{id} | Edit a lookup table. | | 🔴 DELETE /v1/lookupTables/{id} | Delete a lookup table. | | 🟡 PUT /v1/lookupTables/{id}/deleteTableRow | Delete a lookup table row. | | 🟡 PUT /v1/lookupTables/{id}/row | Insert or Update a lookup table row. | | 🟢 POST /v1/lookupTables/{id}/truncate | Empty a lookup table. | | 🟢 POST /v1/lookupTables/{id}/upload | Upload a CSV file. | | 🔵 GET /v1/lookupTables/jobs/{jobId}/status | Get the status of an async job. |

Macro Management

| Endpoint | Description | |---|---| | 🔵 GET /v2/macros | List all macros. | | 🟢 POST /v2/macros | Create a new macro. | | 🔵 GET /v2/macros/{id} | Get a macro. | | 🟡 PUT /v2/macros/{id} | Edit a macro. | | 🔴 DELETE /v2/macros/{id} | Delete a macro. |

Metrics Query

| Endpoint | Description | |---|---| | 🟢 POST /v1/metricsQueries | Run metrics queries |

Metrics Searches Management

| Endpoint | Description | |---|---| | 🟢 POST /v1/metricsSearches | Save a metrics search. | | 🔵 GET /v1/metricsSearches/{id} | Get a metrics search. | | 🟡 PUT /v1/metricsSearches/{id} | Updates a metrics search. | | 🔴 DELETE /v1/metricsSearches/{id} | Deletes a metrics search. |

Metrics Searches Management V2

| Endpoint | Description | |---|---| | 🔵 GET /v2/metricsSearches | List all metrics search pages. | | 🟢 POST /v2/metricsSearches | Create a new metrics search page. | | 🔵 GET /v2/metricsSearches/{id} | Get a metrics search page. | | 🟡 PUT /v2/metricsSearches/{id} | Update a metrics search page. | | 🔴 DELETE /v2/metricsSearches/{id} | Delete a metrics search page. |

Monitors Library Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/monitors | Bulk read a monitor or folder. | | 🟢 POST /v1/monitors | Create a monitor or folder. | | 🔴 DELETE /v1/monitors | Bulk delete a monitor or folder. | | 🔵 GET /v1/monitors/{id} | Get a monitor or folder. | | 🟡 PUT /v1/monitors/{id} | Update a monitor or folder. | | 🔴 DELETE /v1/monitors/{id} | Delete a monitor or folder. | | 🟢 POST /v1/monitors/{id}/copy | Copy a monitor or folder. | | 🔵 GET /v1/monitors/{id}/export | Export a monitor or folder. | | 🟢 POST /v1/monitors/{id}/move | Move a monitor or folder. | | 🔵 GET /v1/monitors/{id}/path | Get the path of a monitor or folder. | | 🔵 GET /v1/monitors/{id}/permissions | List explicit permissions on monitor or folder. | | 🔵 GET /v1/monitors/{id}/permissionSummariesBySubjects | List permission summaries for a monitor or folder. | | 🟢 POST /v1/monitors/{parentId}/import | Import a monitor or folder. | | 🟡 PUT /v1/monitors/disable | Disable monitors. | | 🔵 GET /v1/monitors/path | Read a monitor or folder by its path. | | 🟡 PUT /v1/monitors/permissions/revoke | Revoke all permissions on monitor or folder. | | 🟡 PUT /v1/monitors/permissions/set | Set permissions on monitor or folder. | | 🔵 GET /v1/monitors/playbooks | List all playbooks. | | 🔵 GET /v1/monitors/playbooksDetails | Get playbook details. | | 🔵 GET /v1/monitors/root | Get the root monitors folder. | | 🔵 GET /v1/monitors/search | Search for a monitor or folder. | | 🔵 GET /v1/monitors/usageInfo | Usage info of monitors. |

Muting Schedules Library Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/mutingSchedules | Bulk read a mutingschedule or folder. | | 🟢 POST /v1/mutingSchedules | Create a mutingschedule or folder. | | 🔴 DELETE /v1/mutingSchedules | Bulk delete a mutingschedule or folder. | | 🔵 GET /v1/mutingSchedules/{id} | Get a mutingschedule or folder. | | 🟡 PUT /v1/mutingSchedules/{id} | Update a mutingschedule or folder. | | 🔴 DELETE /v1/mutingSchedules/{id} | Delete a mutingschedule or folder. | | 🟢 POST /v1/mutingSchedules/{id}/copy | Copy a mutingschedule or folder. | | 🔵 GET /v1/mutingSchedules/{id}/export | Export a mutingschedule or folder. | | 🔵 GET /v1/mutingSchedules/{id}/path | Get the path of a mutingschedule or folder. | | 🟢 POST /v1/mutingSchedules/{parentId}/import | Import a mutingschedule or folder. | | 🔵 GET /v1/mutingSchedules/root | Get the root mutingSchedules folder. | | 🔵 GET /v1/mutingSchedules/search | Search for a mutingschedule or folder. |

Oauth Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/oauth/clients | List the OAuth clients. | | 🟢 POST /v1/oauth/clients | Create a new OAuth client. | | 🔵 GET /v1/oauth/clients/{id} | Get an OAuth client. | | 🟡 PUT /v1/oauth/clients/{id} | Update an OAuth client. | | 🔴 DELETE /v1/oauth/clients/{id} | Delete an OAuth client. | | 🟡 PUT /v1/oauth/clients/{id}/rotate | Rotate the oauth client secret | | 🔵 GET /v1/oauth/consents | List OAuth consents. | | 🔴 DELETE /v1/oauth/consents/{consentId} | Delete an OAuth consent. | | 🔵 GET /v1/oauth/scopes | Get all scopes. |

Orgs Management

| Endpoint | Description | |---|---| | 🟢 POST /v1/organizations/usages | Get usages for child orgs. |

Ot Collector Management External

| Endpoint | Description | |---|---| | 🟢 POST /v1/otCollectors | Get paginated list of OT Collectors | | 🔵 GET /v1/otCollectors/{id} | Get OT Collector by ID. | | 🔴 DELETE /v1/otCollectors/{id} | Delete an OT Collector. | | 🔴 DELETE /v1/otCollectors/offline | Delete all Offline OT Collectors | | 🔵 GET /v1/otCollectors/otCollectorsByName | Get OT Collectors by name. | | 🔵 GET /v1/otCollectors/totalCount | Get a count of OT Collectors. |

Parsers Library Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/parsers | Bulk read folders and parsers. | | 🟢 POST /v1/parsers | Create a folder or parser. | | 🔴 DELETE /v1/parsers | Bulk delete folders and parsers. | | 🔵 GET /v1/parsers/{id} | Read a folder or parser. | | 🟡 PUT /v1/parsers/{id} | Update a folder or parser. | | 🔴 DELETE /v1/parsers/{id} | Delete a folder or parser. | | 🟢 POST /v1/parsers/{id}/copy | Copy a folder or parser. | | 🔵 GET /v1/parsers/{id}/export | Export a folder or parser. | | 🟢 POST /v1/parsers/{id}/lock | Lock a folder or a parser. | | 🟢 POST /v1/parsers/{id}/move | Move a folder or parser. | | 🔵 GET /v1/parsers/{id}/path | Get full path of folder or parser. | | 🟢 POST /v1/parsers/{id}/unlock | Unlock a folder or a parser. | | 🟢 POST /v1/parsers/{parentId}/import | Import a folder or parser | | 🔵 GET /v1/parsers/path | Read a folder or parser by its path. | | 🔵 GET /v1/parsers/root | Get the root folder in the library. | | 🔵 GET /v1/parsers/search | Search for folders or parsers. | | 🟢 POST /v1/system/parsers/{id}/lock | Lock a folder or a parser. | | 🟢 POST /v1/system/parsers/{id}/unlock | Unlock a folder or a parser. |

Partition Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/partitions | Get a list of partitions. | | 🟢 POST /v1/partitions | Create a new partition. | | 🔵 GET /v1/partitions/{id} | Get a partition. | | 🟡 PUT /v1/partitions/{id} | Update a partition. | | 🟢 POST /v1/partitions/{id}/cancelRetentionUpdate | Cancel a retention update for a partition | | 🟢 POST /v1/partitions/{id}/decommission | Decommission a partition. | | 🔵 GET /v1/partitions/quota | Provides information about partitions quota. |

Password Policy

| Endpoint | Description | |---|---| | 🔵 GET /v1/passwordPolicy | Get the current password policy. | | 🟡 PUT /v1/passwordPolicy | Update password policy. |

Policies Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/policies/accessKeysLifetime | Get access key lifetime policy. | | 🟡 PUT /v1/policies/accessKeysLifetime | Set access keys lifetime policy. | | 🔵 GET /v1/policies/audit | Get Audit policy. | | 🟡 PUT /v1/policies/audit | Set Audit policy. | | 🔵 GET /v1/policies/dataAccessLevel | Get Data Access Level policy. | | 🟡 PUT /v1/policies/dataAccessLevel | Set Data Access Level policy. | | 🔵 GET /v1/policies/dataDeletion | Get Data Deletion policy. | | 🟡 PUT /v1/policies/dataDeletion | Set Data Deletion policy. | | 🔵 GET /v1/policies/maxUserSessionTimeout | Get Max User Session Timeout policy. | | 🟡 PUT /v1/policies/maxUserSessionTimeout | Set Max User Session Timeout policy. | | 🔵 GET /v1/policies/oAuthCimd | Get OAuth policy for Client ID Metadata Documents (CIMD) authentication. | | 🟡 PUT /v1/policies/oAuthCimd | Set OAuth policy for Client ID Metadata Documents (CIMD) authentication. | | 🔵 GET /v1/policies/searchAudit | Get Search Audit policy. | | 🟡 PUT /v1/policies/searchAudit | Set Search Audit policy. | | 🔵 GET /v1/policies/shareDashboardsOutsideOrganization | Get Share Dashboards Outside Organization policy. | | 🟡 PUT /v1/policies/shareDashboardsOutsideOrganization | Set Share Dashboards Outside Organization policy. | | 🔵 GET /v1/policies/timestampFormat | Get Alert Timestamp Format policy. | | 🟡 PUT /v1/policies/timestampFormat | Set Alert Timestamp Format policy. | | 🔵 GET /v1/policies/userConcurrentSessionsLimit | Get User Concurrent Sessions Limit policy. | | 🟡 PUT /v1/policies/userConcurrentSessionsLimit | Set User Concurrent Sessions Limit policy. |

Role Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/roles | Get a list of roles. | | 🟢 POST /v1/roles | Create a new role. | | 🔵 GET /v1/roles/{id} | Get a role. | | 🟡 PUT /v1/roles/{id} | Update a role. | | 🔴 DELETE /v1/roles/{id} | Delete a role. | | 🟡 PUT /v1/roles/{roleId}/users/{userId} | Assign a role to a user. | | 🔴 DELETE /v1/roles/{roleId}/users/{userId} | Remove role from a user. |

Role Management V2

| Endpoint | Description | |---|---| | 🔵 GET /v2/roles | Get a list of roles. | | 🟢 POST /v2/roles | Create a new role. | | 🔵 GET /v2/roles/{id} | Get a role. | | 🟡 PUT /v2/roles/{id} | Update a role. | | 🔴 DELETE /v2/roles/{id} | Delete a role. | | 🟡 PUT /v2/roles/{roleId}/users/{userId} | Assign a role to a user. | | 🔴 DELETE /v2/roles/{roleId}/users/{userId} | Remove role from a user. |

Saml Configuration Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/saml/allowlistedUsers | Get list of allowlisted users. | | 🟢 POST /v1/saml/allowlistedUsers/{userId} | Allowlist a user. | | 🔴 DELETE /v1/saml/allowlistedUsers/{userId} | Remove an allowlisted user. | | 🔵 GET /v1/saml/identityProviders | Get a list of SAML configurations. | | 🟢 POST /v1/saml/identityProviders | Create a new SAML configuration. | | 🟡 PUT /v1/saml/identityProviders/{id} | Update a SAML configuration. | | 🔴 DELETE /v1/saml/identityProviders/{id} | Delete a SAML configuration. | | 🔵 GET /v1/saml/identityProviders/{id}/metadata | Get SAML configuration metadata XML. | | 🟢 POST /v1/saml/lockdown/disable | Disable SAML lockdown. | | 🟢 POST /v1/saml/lockdown/enable | Require SAML for sign-in. |

Scheduled View Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/scheduledViews | Get a list of scheduled views. | | 🟢 POST /v1/scheduledViews | Create a new scheduled view. | | 🔵 GET /v1/scheduledViews/{id} | Get a scheduled view. | | 🟡 PUT /v1/scheduledViews/{id} | Update a scheduled view. | | 🔴 DELETE /v1/scheduledViews/{id}/disable | Disable a scheduled view. | | 🟢 POST /v1/scheduledViews/{id}/pause | Pause a scheduled view. | | 🟢 POST /v1/scheduledViews/{id}/start | Start a scheduled view. | | 🔵 GET /v1/scheduledViews/quota | Provides information about scheduled views quota. |

Schema Base Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/schemaIdentitiesGrouped | Get schema base identities grouped by type and sorted by version. |

Scim User Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/scim/Users | List SCIM Users | | 🟢 POST /v1/scim/Users | Create SCIM User | | 🔵 GET /v1/scim/Users/{id} | Get a SCIM User | | 🟡 PUT /v1/scim/Users/{id} | Update SCIM User | | 🟣 PATCH /v1/scim/Users/{id} | Update SCIM User Attributes | | 🔴 DELETE /v1/scim/Users/{id} | Delete SCIM User |

Service Account Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/serviceAccounts | Get a list of service accounts. | | 🟢 POST /v1/serviceAccounts | Create a new service account. | | 🔵 GET /v1/serviceAccounts/{id} | Get a service account. | | 🟡 PUT /v1/serviceAccounts/{id} | Update a service account. | | 🔴 DELETE /v1/serviceAccounts/{id} | Delete a service account. | | 🔵 GET /v1/serviceAccounts/{serviceAccountId}/accessKeys | List access keys for a service account. | | 🟢 POST /v1/serviceAccounts/{serviceAccountId}/accessKeys | Create a new access key for a service account. | | 🔵 GET /v1/serviceAccounts/{serviceAccountId}/accessKeys/{accessId} | Get an access key of a service account. | | 🟡 PUT /v1/serviceAccounts/{serviceAccountId}/accessKeys/{accessId} | Update an access key of a service account. | | 🔴 DELETE /v1/serviceAccounts/{serviceAccountId}/accessKeys/{accessId} | Delete an access key of a service account. |

Service Allowlist Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/serviceAllowlist/addresses | List all allowlisted CIDRs/IP addresses. | | 🟢 POST /v1/serviceAllowlist/addresses/add | Allowlist CIDRs/IP addresses. | | 🟢 POST /v1/serviceAllowlist/addresses/remove | Remove allowlisted CIDRs/IP addresses. | | 🟢 POST /v1/serviceAllowlist/disable | Disable service allowlisting. | | 🟢 POST /v1/serviceAllowlist/enable | Enable service allowlisting. | | 🔵 GET /v1/serviceAllowlist/status | Get the allowlisting status. |

Service Map

| Endpoint | Description | |---|---| | 🔵 GET /v1/tracing/serviceMap | Get a service map. |

Slos Library Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/slos | Bulk read a slo or folder. | | 🟢 POST /v1/slos | Create a slo or folder. | | 🔴 DELETE /v1/slos | Bulk delete a slo or folder. | | 🔵 GET /v1/slos/{id} | Get a slo or folder. | | 🟡 PUT /v1/slos/{id} | Update a slo or folder. | | 🔴 DELETE /v1/slos/{id} | Delete a slo or folder. | | 🟢 POST /v1/slos/{id}/copy | Copy a slo or folder. | | 🔵 GET /v1/slos/{id}/export | Export a slo or folder. | | 🟢 POST /v1/slos/{id}/move | Move a slo or folder. | | 🔵 GET /v1/slos/{id}/path | Get the path of a slo or folder. | | 🟢 POST /v1/slos/{parentId}/import | Import a slo or folder. | | 🔵 GET /v1/slos/path | Read a slo or folder by its path. | | 🔵 GET /v1/slos/root | Get the root slos folder. | | 🔵 GET /v1/slos/search | Search for a slo or folder. | | 🔵 GET /v1/slos/sli | Bulk fetch SLI values, error budget remaining and SLI computation status for the current compliance period. | | 🔵 GET /v1/slos/usageInfo | Usage info of SLOs. |

Source Template Management External

| Endpoint | Description | |---|---| | 🔵 GET /v1/sourceTemplate | Return all source templates of a customer (deprecated). | | 🟢 POST /v1/sourceTemplate | Create source template (deprecated). | | 🔵 GET /v1/sourceTemplate/{id} | Get a source template by Id (deprecated). | | 🟢 POST /v1/sourceTemplate/{id} | Update source template (deprecated). | | 🔴 DELETE /v1/sourceTemplate/{id} | Delete a source template (deprecated). | | 🟡 PUT /v1/sourceTemplate/{id}/status | Update status of source template (deprecated) | | 🟢 POST /v1/sourceTemplate/getLinkedSourceTemplatesImpact | Get linked source templates update based on the ot-collector tags user is wants to update. | | 🔵 GET /v1/sourceTemplates | List all source templates. | | 🟢 POST /v1/sourceTemplates | Create source template. | | 🔵 GET /v1/sourceTemplates/{id} | Get a source template by Id. | | 🟢 POST /v1/sourceTemplates/{id} | Update source template. | | 🔴 DELETE /v1/sourceTemplates/{id} | Delete a source template. | | 🟡 PUT /v1/sourceTemplates/{id}/status | Update status of source template | | 🟢 POST /v1/sourceTemplates/{id}/upgrade | Upgrade source template. | | 🟢 POST /v1/sourceTemplates/getLinkedSourceTemplatesImpact | Preview source template linking changes. | | 🟢 POST /v1/upgrade/sourceTemplate/{id} | Upgrade source template (deprecated). |

Span Analytics

| Endpoint | Description | |---|---| | 🟢 POST /v1/tracing/spanquery | Run a span analytics query asynchronously. | | 🔴 DELETE /v1/tracing/spanquery/{queryId} | Cancel a span analytics query. | | 🔵 GET /v1/tracing/spanquery/{queryId}/aggregates | Get span analytics query aggregated results. | | 🟡 PUT /v1/tracing/spanquery/{queryId}/pause | Pause a span analytics query. | | 🟡 PUT /v1/tracing/spanquery/{queryId}/resume | Resume a span analytics query. | | 🔵 GET /v1/tracing/spanquery/{queryId}/rows/{rowId}/facets | Get a list of facets of a span analytics query. | | 🔵 GET /v1/tracing/spanquery/{queryId}/rows/{rowId}/spans | Get results of a span analytics query. | | 🔵 GET /v1/tracing/spanquery/{queryId}/status | Get a span analytics query status. | | 🔵 GET /v1/tracing/spanquery/fields | Get filter fields for span analytics queries. | | 🔵 GET /v1/tracing/spanquery/fields/{field}/values | Get span analytics query filter field values. |

Threat Intel Ingest

| Endpoint | Description | |---|---| | 🟡 PUT /v1/threatIntel/datastore/dataSource/{dataSourceName} | Updates source properties | | 🔵 GET /v1/threatIntel/datastore/db | Get threat intel indicators DB information | | 🔴 DELETE /v1/threatIntel/datastore/db | Remove the threat intel indicators DB | | 🔵 GET /v1/threatIntel/datastore/retentionPeriod | Get threat intel indicators store retention period in terms of days. | | 🟢 POST /v1/threatIntel/datastore/retentionPeriod | Set the threat intel indicators store retention period in terms of days. |

Threat Intel Ingest Producer

| Endpoint | Description | |---|---| | 🔴 DELETE /v1/threatIntel/datastore/indicators | Removes indicators by their IDS | | 🟢 POST /v1/threatIntel/datastore/indicators/normalized | Uploads indicators in a Sumo normalized format. | | 🟢 POST /v1/threatIntel/datastore/indicators/stix | Uploads indicators in a STIX 2.x json format. |

Tokens Library Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/tokens | Get a list of tokens. | | 🟢 POST /v1/tokens | Create a token. | | 🔵 GET /v1/tokens/{id} | Get a token. | | 🟡 PUT /v1/tokens/{id} | Update a token. | | 🔴 DELETE /v1/tokens/{id} | Delete a token. |

Traces

| Endpoint | Description | |---|---| | 🔵 GET /v1/tracing/metrics | Get trace search query metrics. | | 🟢 POST /v1/tracing/tracequery | Run a trace search query asynchronously. | | 🔴 DELETE /v1/tracing/tracequery/{queryId} | Cancel a trace search query. | | 🔵 GET /v1/tracing/tracequery/{queryId}/rows/{rowId}/traces | Get results of a trace search query. | | 🔵 GET /v1/tracing/tracequery/{queryId}/status | Get a trace search query status. | | 🔵 GET /v1/tracing/tracequery/fields | Get filter fields for trace search queries. | | 🔵 GET /v1/tracing/tracequery/fields/{field}/values | Get trace search query filter field values. | | 🔵 GET /v1/tracing/traces/{traceId} | Get trace details. | | 🔵 GET /v1/tracing/traces/{traceId}/criticalPath | Get a critical path of a trace. | | 🔵 GET /v1/tracing/traces/{traceId}/criticalPath/breakdown/service | Get a critical path service breakdown of a trace. | | 🔵 GET /v1/tracing/traces/{traceId}/exists | Check if the trace exists. | | 🔵 GET /v1/tracing/traces/{traceId}/spans | Get a list of trace spans. | | 🔵 GET /v1/tracing/traces/{traceId}/spans/{spanId} | Get span details. | | 🔵 GET /v1/tracing/traces/{traceId}/spans/{spanId}/billingInfo | Get span billing details. | | 🔵 GET /v1/tracing/traces/{traceId}/traceEvents | Get a list of events (without their attributes) per span for a trace. |

Transformation Rule Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/transformationRules | Get a list of transformation rules. | | 🟢 POST /v1/transformationRules | Create a new transformation rule. | | 🔵 GET /v1/transformationRules/{id} | Get a transformation rule. | | 🟡 PUT /v1/transformationRules/{id} | Update a transformation rule. | | 🔴 DELETE /v1/transformationRules/{id} | Delete a transformation rule. |

User Management

| Endpoint | Description | |---|---| | 🔵 GET /v1/users | Get a list of users. | | 🟢 POST /v1/users | Create a new user. | | 🔵 GET /v1/users/{id} | Get a user. | | 🟡 PUT /v1/users/{id} | Update a user. | | 🔴 DELETE /v1/users/{id} | Delete a user. | | 🟢 POST /v1/users/{id}/email/requestChange | Change email address. | | 🟡 PUT /v1/users/{id}/mfa/disable | Disable MFA for user. | | 🟢 POST /v1/users/{id}/password/reset | Reset password. | | 🟢 POST /v1/users/{id}/resendWelcomeEmail | Resend verification email. | | 🟢 POST /v1/users/{id}/unlock | Unlock a user. |

Resources

• n8n Community Nodes Documentation
• Sumo Logic API Documentation

Built with

This node was generated using Zack Roberts Node Studio, powered by @zackrobertstech/n8n-openapi-node-builder (a maintained fork of @avantguardllc/n8n-openapi-node).

License

MIT