Apps, Solutions, and Collection Integrations - March Release

New Release

We’re excited to announce the release of the following apps for Sumo Logic.

• Amazon SageMaker. The Amazon SageMaker app provide insights into CloudTrail, CloudWatch Logs, and performance metrics for your Amazon SageMaker service. Learn more.
• Azure Firewall. The Azure Firewall app enables centralized visibility into firewall health, network and application rules, threat intelligence, and IDPS events. Learn more.
• Azure Subscription. The Azure Subscription app centralizes the collection and analysis of activity logs, enhancing security, operational visibility, and compliance monitoring. Learn more.
• Data Volume for MSSP. The Data Volume for MSSP app provides centralized visibility into data usage across child organizations by type, tier, category, and source. Learn more.
• Apache Hadoop - OpenTelemetry. The Apache Hadoop - OpenTelemetry app delivers end-to-end visibility into cluster health, performance, and resource utilization through logs and metrics. Learn more.
• OpenLLMetry. The OpenLLMetry app enables end-to-end observability of LLM applications by collecting traces, metrics, and events across prompts, responses, latency, and errors. Learn more.

Enhancements

We’ve enhanced multiple Sumo Logic apps to improve visibility, usability, and proactive monitoring with refreshed queries, localized dashboards, and new monitor alerts.

• Abnormal Security. Added monitor alerts to accelerate incident response and updated the existing dashboards to enhance panel queries. Learn more.
• AWS Lambda Extension. The Sumo Logic AWS Lambda Extension v1.4.0 now supports Lambda managed instance runtime and adds deployment support for two new AWS regions: ca-west-1 and eusc-de-east-1. This update enhances runtime compatibility and expands regional availability, enabling more flexible and scalable deployments. Learn more.
• Azure Security. Updated the Microsoft Defender for Cloud Apps and Microsoft Entra ID Protection apps with refreshed content and new monitor alerts.
• Cato Networks. Updated the Cato Networks app with enhanced dashboard panels and monitor alerts to ensure rapid incident response and regulatory compliance. Learn more.
• Cisco Meraki - C2C. Added monitor alerts along with the Network Traffic Overview dashboard to enable continuous tracking of network traffic patterns, insecure port usage, and geo-based risks in Cisco Meraki, helping quickly detect anomalies and strengthen network security. Learn more.
• AWS CloudTrail. Added monitor alerts along with the Root User Monitoring dashboard to provide real-time visibility and detection of high-risk root user activities and critical security events in your AWS environment. Learn more.
• Duo Security. Added monitor alerts along with the Activity Events dashboard and Users Overview dashboard to provide visibility into administrator activity and user security posture in Duo Security, helping strengthen overall access control. Learn more.
• Google Workspace. Added monitor alerts along with the Google Workspace - Alert Center - Mobile Device Management dashboard and Google Workspace - Alert Center - Admin Actions dashboard to enable faster response and improved security posture n Google Workspace. Learn more.
• Microsoft Graph Azure AD Reporting. Added monitor alerts along with the Sign-Ins Security Overview dashboard and Provisioning Error Analysis dashboard to provide comprehensive visibility into Azure AD authentication and provisioning activities, enabling faster detection and management of anomalies. Learn more.
• Mimecast. Added monitor alerts along with Audit Events Overview, DLP Policy Monitoring, Hold Message Analysis, SIEM Logs - Overview, SIEM Logs - Threat Protection, and SIEM Logs - Email Processing and Delivery dashboards to enhance visibility into email traffic, threat detection, and data loss, strengthening Mimecast security posture. Learn more.
• Microsoft Exchange Trace Logs. Updated the following documentations:
  • Microsoft Exchange Trace Logs source. to use the Microsoft Graph API as the new data access endpoint, replacing the Office 365 reporting service that Microsoft will deprecate on April 8, 2026. Learn more.
  • Microsoft Exchange Trace Logs app. Added monitor alerts along with the Security Overview dashboard to provide insights into email security to quickly detect risks and suspicious patterns within your Microsoft Exchange Trace Logs environment. Learn more.
• Netskope. Added monitor alerts along with the Admin Audit & Compliance dashboard and Watchlist & Insider Threat dashboard to provide a deeper visibility into administrative activity and potential insider risks within your Netskope environment. Learn more.
• Salesforce. Added monitor alerts to strengthen security and updated the existing dashboards to enhance panel queries. Learn more.
• Sumo Logic Audit app. Added the Library Content - Monitors dashboard to the Sumo Logic Audit app to provide insights into monitors usage based on users working with monitors, deletions, and notifications. Learn more.
• Workday. Added monitor alerts along with the Data Access and Exfiltration Risk dashboard, Security Posture dashboard, and Session Intelligence dashboard to enable visibility into data access risks, security posture, and user session behavior in Workday. Learn more.