Sumo Logic TechChat Webinar

Tech Update January 22, 2015

Hosted by:

Ben Newton, Sumo Logic Product Manager Vera Chen, Sumo Logic Technical Marketing Engineer

Agenda  

I. Usability o  Dashboard Enhancements o  Field browser Enhancements

II. New Apps

o  Sumo Logic App for Audit o  Sumo Logic App for Box

III. Collection

o  Enhancements and Configuration Automation IV. Q&A

o  Question and Answer Session

Usability  

I. Dashboard Enhancements o  Editing Updates

o  Edit vs. View Mode o  Resizing Panels

o  New Look and Feel o  Full Screen mode o  Light and Dark Themes o  Text and Title Panels o  New Look and Feel for Single Value Monitor and Pie Chart

II. Field Browser Enhancements

o  Field Display o  Show and Hide Fields in Search

o  Field Statistics o  How many values, and what is the value distribution? o  Drill down searches

Sumo Logic Audit Index  

o  Audit of activity in your Sumo Logic Account o  Administrative Activities (ex. Create a User) o  User Activities (ex. Logins) o  Scheduled Search Activity (ex. # Scheduled search runs)

o  Enable Under Security Menu

o  Search Against Audit Index o  _index=sumologic_audit

Sumo Logic App for Audit  

Sumo Logic App for Audit  

Sumo Logic App for Box  

o  What is Box? o  Enterprise content collaboration cloud service o  Generates activity logs

o  Use Cases

o  Audit end-user and administrator activity o  View user location, device mix and network location o  Monitor resource access and collaboration o  Determine Box license usage o  Investigate failed logins and administrative actions o  Search specific events across Box environment

o  Live Demo of Built-in Dashboards

Collector Management  

o  Improved Support o  Support for configuration management tools & processes like Chef,

Puppet, etc. o  Full lifecycle management of collector sources via. local config files.

Collector Management  

Where We Are Today and Where We Are Heading

Method   Create   Edit   Delete  

UI   ✓   ✓   ✓  

API   ✓   ✓   ✓  

File-­‐based   ✓   !   !  

Method   Create   Edit   Delete  

UI   ✓   ✓   ✓  

API   ✓   ✓   ✓  

File-­‐based   ✓   ✓   ✓    CURRENT        

 FEBRUARY        

New Collector Process  

Process Overview

Migrating Existing Collectors  

o  API:  Set  config  to  read  from  latest  sources.json  o  Push  updates  to  local  sources.json  o  Update  sumo.conf  and  restart  o  Turn  on  feature  via  UI  or  API  Note:  test  your  changes  in  a  non-­‐prod  environment  first  

 o  Install  new  collector  using  file-­‐based  management  o  Push  source  updates  to  sources.json  file    

(manually  or  via  config  management  tools  like  Chef/Puppet,  etc.)  Note:    “Rate  LimiKng”  and  throMling  will  apply  and  depends  on  how  many  collectors  are  changed  at  one  Kme  

 

Questions & Answer Session

Sumo Logic Thanks You for Joining!