Question:

After making the initial call to the Sumo Logic Search Job API, any follow up calls I make to query the status or results of the search job return a "500 Internal Server Error" or "Job ID is invalid". Is there an issue occurring with the service or job?

Answer:

When making a request to the Search Job API, the original job query creates a session cookie, which must be stored and passed with any follow-up calls to the search job created. Sumo Logic routes the API requests to the server processing the search job based on the cookie provided with the request; if no cookie is provided the request may be passed to an incorrect server, resulting in a 500 error.

For example, when using cURL we capture, store, and then pass the cookie back on the query request using the commands shown below:

Create the job

curl -v -u <user_name>:<password> -b cookies.txt -c cookies.txt -X POST -H "Content-Type: application/json" -T /path/to/query/json/ "https://api.sumologic.com/api/v1/search/jobs"

Query the Job

curl -v -u <user_name>:<password> -b cookies.txt -c cookies.txt -X GET -H 'Accept: application/json' "https://api.sumologic.com/api/v1/search/jobs/<SERCH_JOB_ID>"

The Search Job API documentation provides an example of how to use the API (and does specify that cookies are to be supplied). Better error messaging around this type of error is under review and should be provided in a future release.