Apps, Solutions, and Collection Integrations - April Release

New Release

We’re excited to announce the release of the following Sumo Logic apps.

• Azure SQL Managed Instance. Added a comprehensive set of dashboards and monitor alerts for the Azure SQL Managed Instance app, providing enhanced visibility into performance, security, operations, and workload health across all managed instances. Learn more.
• Enterprise Audit - Collection and Data Forwarding for MSSP. The Sumo Logic app for Enterprise Audit – Collector and Data Forwarding Management for MSSP provides centralized visibility into collector activity, source behavior, and data-forwarding trends across child organizations within an MSSP environment. Learn more.
• LiteLLM. The Sumo Logic app for LiteLLM provides a centralized visibility into LiteLLM usage, performance, reliability, and cost, helping teams monitor latency, tokens, spend, failures, and fallbacks across multiple LLM providers to keep AI workloads efficient and reliable. Learn more.
• Upwind. The Sumo Logic app for Upwind helps you send threat, configuration, and audit events to Sumo Logic via webhook for centralized monitoring. Learn more.

Enhancements

We’ve enhanced multiple Sumo Logic apps to improve visibility, usability, and proactive monitoring with refreshed queries, localized dashboards, and new monitor alerts.

• AWS CloudTrail. Added two new dashboards for Security Analytics - Data Exfiltration and Exposure and Security Analytics - Suspicious Indicators, along with monitor alerts to help ensure continuous visibility, protect critical security controls, and enable rapid response to high-impact threats. Learn more.
• Box. Added six new dashboards for Admin and Compliance, Collaboration and Sharing, Overview, Resource Monitoring, Security Threats and Anomalies, and User Monitoring, along with monitoring alerts for proactive threat detection and mitigation. Learn more.
• Citrix Cloud. Added three new dashboards for Network and Client Overview, Session Logon Performance, and User Experience and Session Health, along with monitor alerts to help ensure secure access, stable performance, and faster troubleshooting for Citrix Cloud environments.Learn more.
• Enterprise Audit - Collector & Data Forwarding Management. Added a new dashboard for Installed Collector Upgrade for detailed analysis, helping you track upgrade activity and troubleshoot failed upgrades by collector, requester, and version path. Learn more.
• Infrequent Data Tier. Updated the dashboard images for enhanced visibility and accuracy. Learn more.
• Microsoft Foundry:
  • Renamed the Azure OpenAI app to Microsoft Foundry to reflect expanded support for multiple models beyond OpenAI and a unified AI platform experience.
  • Added four new dashboards for Speech and Audio, Traffic and Payload, Translation and Document, and Usage and Token Consumption to provide deeper visibility into workload performance and resource utilization. Learn more.
• Slack. Added five new dashboards for App Overview, Files Overview, User Authentication and Security, Access Security Overview, and Workspace Security Overview, along with monitor alerts to detect and respond to data breaches and security threats. Learn more.
• Tenable. Added two new dashboards for Vulnerability Analysis and Asset Inventory, along with monitor alerts to detect and fix critical severity vulnerabilities. Learn more.

Collection Mechanism

Azure Append Blob and Azure Block Blob v4.1.8. Forced fast-xml-parser to patched versions across BlockBlob and AppendBlob target builds, and updated the test requests dependency to resolve Dependabot alerts after rescan.

Solution

AWS Observability v2.14.0. Updated the AWS Observability solution to support the Zurich deployment and enhanced nine AWS apps, including improvements to Load Balancer FERs for better monitoring and performance insights. Learn more.

Bug fixes

• Removed hardcoded aws partition from ARN parse statements for Amazon Redshift ULM and Amazon SES.
• Fixed the ARN partition value in parse statements for Amazon Bedrock.