Cloud SOAR APIs

The Cloud SOAR APIs allow you to manage incidents, triage, and other Cloud SOAR features.

info

If your instance URL is a subdomain of soar.sumologic.com, refer to Inline API documentation below.

Refer to Getting Started for Sumo Logic API Authentication, Endpoints, and Security.

Our APIs are built with OpenAPI. You can generate client libraries in several languages and explore automated testing.

To access our API documentation, navigate to the appropriate link based on your Sumo deployment. Deployment types differ based on geographic location and account creation date. If unsure, see How to determine your endpoint.

Deployment	Documentation URL
AU	https://api.au.sumologic.com/docs/csoar/
CA	https://api.ca.sumologic.com/docs/csoar/
DE	https://api.de.sumologic.com/docs/csoar/
EU	https://api.eu.sumologic.com/docs/csoar/
IN	https://api.in.sumologic.com/docs/csoar/
JP	https://api.jp.sumologic.com/docs/csoar/
US1	https://api.sumologic.com/docs/csoar/
US2	https://api.us2.sumologic.com/docs/csoar/

Inline API documentation

For organizations having Cloud SOAR available at URLs matching the pattern *.soar.sumologic.com, the API documentation is available through your Cloud SOAR instance at the following URL:

https://<cloudsoarhost>/incmansuite_ng/lib/gui/app.php#support_apidoc|api_documentation_v3

For more information, see Legacy Cloud SOAR APIs.