sumo-logic-mcp
Provides 37 tools for interacting with Sumo Logic, enabling search and analytics, monitor management, alert management, dashboard management, collector and source management, and metrics queries.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@sumo-logic-mcplist all monitors with critical status"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
sumo-logic-mcp
MCP server for Sumo Logic — 48 tools for searching logs, managing monitors, alerts, dashboards, collectors, metrics, content library, users, roles, fields, partitions, lookup tables, and ingest budgets.
Generic and org-agnostic. Any team can plug in their own Sumo Logic credentials and start querying.
Note: This is an experimental, community-driven project — not an official Sumo Logic product. Feel free to test it and use it.
Installation
pip install sumo-logic-mcpOr run without installing (via uv):
uvx sumo-logic-mcpRelated MCP server: Unofficial FortiMonitor MCP Server
Setup
1. Get Access Credentials
Log in to your Sumo Logic account (e.g.,
https://<your-org>.sumologic.com)Click on your profile icon (top right) and go to Preferences
Scroll to My Access Keys and click Add Access Key
Give it a name, leave scopes to default or set as needed
Copy both the Access ID and Access Key
2. Configure Your MCP Client
Add to your MCP client configuration (e.g., ~/.cursor/mcp.json or Claude Desktop config):
{
"mcpServers": {
"sumologic": {
"command": "uvx",
"args": ["sumo-logic-mcp"],
"env": {
"SUMOLOGIC_ACCESS_ID": "<your-access-id>",
"SUMOLOGIC_ACCESS_KEY": "<your-access-key>",
"SUMOLOGIC_ENDPOINT": "https://api.sumologic.com"
}
}
}
}Or run directly:
export SUMOLOGIC_ACCESS_ID="your-access-id"
export SUMOLOGIC_ACCESS_KEY="your-access-key"
export SUMOLOGIC_ENDPOINT="https://api.sumologic.com"
sumo-logic-mcpTool Reference
Search & Analytics (4 tools)
Tool | Description | Required Params |
| Execute a log search (full lifecycle: create job, poll, fetch, cleanup) |
|
| Check status of a running search job |
|
| Fetch messages or records from a search job |
|
| Cancel a running search job |
|
search_logs optional params: from_time (default -15m), to_time (default now), timezone (default UTC), limit (default 100), by_receipt_time, timeout (default 300s).
Time formats: ISO 8601 (2024-01-15T09:00:00), relative (-15m, -1h, -2d, -1w), epoch ms (1718745600000), or now.
Monitor Management (10 tools)
Tool | Description | Required Params |
| List all monitors | — |
| Search by name or status filter |
|
| Get full monitor configuration |
|
| Create a new monitor |
|
| Update monitor config (read-modify-write) |
|
| Delete a monitor (irreversible) |
|
| Enable a disabled monitor |
|
| Disable a monitor |
|
| Get current health/triggering state |
|
| Get alert history for a monitor |
|
Alert Management (3 tools)
Tool | Description | Required Params |
| Get all currently firing alerts | — |
| Get detailed alert info for a monitor |
|
| Resolve an alert by disabling its monitor |
|
Dashboard Management (5 tools)
Tool | Description | Required Params |
| List dashboards with pagination | — |
| Get full dashboard config |
|
| Create a dashboard with panels and layout |
|
| Update dashboard config (read-modify-write) |
|
| Delete a dashboard (irreversible) |
|
Collector & Source Management (8 tools)
Tool | Description | Required Params |
| List all collectors | — |
| Get collector configuration |
|
| Create a new Hosted collector |
|
| Update collector config (with ETag locking) |
|
| Delete a collector and its sources |
|
| List sources on a collector |
|
| Get source configuration |
|
| Create an HTTP source (returns endpoint URL) |
|
Metrics (4 tools)
Tool | Description | Required Params |
| Execute a metrics query |
|
| Discover available metric names | — |
| Get dimensions for a metric |
|
| List metric content types | — |
Content Library (3 tools)
Tool | Description | Required Params |
| Get your personal content folder and children | — |
| Get a folder and its child items |
|
| Look up content by library path |
|
Administration (8 tools)
Tool | Description | Required Params |
| List all users with emails, roles, status | — |
| List roles with capabilities and filters (v2) | — |
| List all fields (built-in + custom) | — |
| List FERs with scopes and parse expressions | — |
| List partitions with routing and retention | — |
| List lookup tables with schemas | — |
| Get a lookup table's config and fields |
|
| List ingest budgets with scopes and capacity | — |
Utility (3 tools)
Tool | Description | Required Params |
| Verify API connectivity and auth | — |
| Get account status and ingestion info | — |
| Check if a query is syntactically valid |
|
Usage Examples
Once configured, just ask your AI assistant naturally:
"Search for 500 errors in the last hour"
"Show me all critical alerts"
"Create a monitor for high error rates on our API"
"List all hosted collectors"
"What CPU metrics are available?"
"Show me the field extraction rules"
"List all partitions and their retention periods"Development
git clone https://github.com/rajfirke/sumo-logic-mcp.git
cd sumo-logic-mcp
python3 -m venv .venv
source .venv/bin/activate
pip install -e ".[dev]"
# Lint
ruff check src/ tests/
# Test
pytest -v
# Run locally
export SUMOLOGIC_ACCESS_ID="..."
export SUMOLOGIC_ACCESS_KEY="..."
export SUMOLOGIC_ENDPOINT="https://api.sumologic.com"
sumo-logic-mcpArchitecture
src/sumo_logic_mcp/
├── __init__.py # Exports mcp, triggers tool registration
├── __main__.py # Entry point: python -m sumo_logic_mcp
├── server.py # FastMCP instance + lifespan (shared HTTP client)
├── client.py # Async HTTP client (httpx, Basic Auth, retry, cookies)
├── validation.py # Time parsing and validation
└── tools/
├── __init__.py # Imports all tool modules
├── search.py # 4 search tools
├── monitors.py # 10 monitor tools
├── alerts.py # 3 alert tools
├── dashboards.py # 5 dashboard tools
├── collectors.py # 8 collector/source tools
├── metrics.py # 4 metrics tools
├── content.py # 3 content library tools
├── admin.py # 8 admin tools (users, roles, fields, partitions, etc.)
└── utils.py # 3 utility toolsMaintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- -licenseBquality-maintenanceMCP server for Akamai APIs. 198 tools covering Property Manager, Edge DNS, CPS, WAF, and reporting. Built with TypeScript, featuring modular architecture, comprehensive testing, and multi-account support. Make Akamai accessible to AI assistants.Last updated1910
- Alicense-qualityBmaintenanceMCP server for the FortiMonitor v2 monitoring API. 241 tools across 33 modules covering server management, outage monitoring, maintenance windows, metrics, notifications, cloud monitoring, SNMP, dashboards, reporting, and more. Unofficial community project, not affiliated with Fortinet. Python, MIT license, Docker and local deployment supported.Last updated3MIT
- Alicense-qualityAmaintenanceFull-featured MCP server for Apache Superset — 135+ tools for dashboards, charts, datasets, SQL Lab, security (users, roles, RLS, groups), audit, and more. Built-in safety validations.Last updated50MIT
- FlicenseBqualityBmaintenanceMCP server that integrates with Sumo Logic's API to perform log searches, data discovery, metrics queries, and monitoring.Last updated1537
Related MCP Connectors
A paid remote MCP for CLI tool MCP, built to return verdicts, receipts, usage logs, and audit-ready
34 production API tools over one hosted MCP endpoint.
MCP server for interacting with the Supabase platform
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/rajfirke/sumo-logic-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server