List Sumo Logic Monitors (native alerting; read-only)
sumo_list_monitorsDiscover Sumo Logic monitors with their status, triggers, and notifications. Filter by name or status to audit alerting configurations.
Instructions
Discovers the org's native Sumo Logic Monitors (the 24/7 prod alerting): name, folder path, type, enabled/disabled, current status, trigger types, and notification destinations. Read-only management-API call — no search jobs involved. Requires an access key with the "View Monitors" capability (without it Sumo returns HTTP 403). FOOTGUN: free-text query matching is NAME-ONLY, case-insensitive substring — folder paths are NOT searched (a folder name yields 0 even when monitors live under it). The query syntax also accepts monitorStatus:<Critical|Warning|MissingData|Normal|Disabled> (what the status param wraps). Fired-alert HISTORY is a different question — use sumo_list_alerts.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Max monitors returned per API call (default 100). | |
| query | No | Filter text (Sumo monitors-search syntax). Matching is NAME-ONLY case-insensitive substring — folder paths are not searched. | |
| status | No | Filter by current monitor status. The API has NO OR support — multiple statuses run one API call each, unioned client-side by monitor id. |