Search Job API Architectural Improvements (Search)

The Search Job Management API is now fully OpenAPI-compliant and no longer relies on session cookies, so you can run search jobs across complex environments and AI frameworks with zero cookie-management overhead. It also adds parent-child org support for multi-tenant automation.

What's new

• OpenAPI compliance. A standardized schema lets you auto-generate SDKs in any language and integrate natively with Postman and CI/CD pipelines.
• Stateless architecture. The Search Job Management API no longer uses session cookies. Each request is addressed by the search job's jobId, so scripts don't need to store or send cookies.
• AI and MCP readiness. Long-running search jobs can be polled without session cookies, which suits AI agents and Model Context Protocol (MCP) frameworks. See the Sumo Logic MCP Server for details on connecting AI tools to Sumo Logic.
• Optimized Execution Defaults. Queries are now more performant and efficient, with reduced data transfer and better compatibility with other internal optimizations.
• Parent-child org support (MSSP). MSSPs and enterprise admins can now automate parent-child and cross-org searches via the API, which were previously only available through the UI.

For more information, see Search Job Management API.