Skip to main content
Sumo Logic

Use the Audit Index with Webhook Connections

If the Sumo Logic Audit Index has been enabled you can keep an eye on scheduled searches that send results via Webhook. Additionally, you can see which people in your organization are creating scheduled searches.

  1. First make sure that the Audit Index has been enabled in your account.
  2. Run _index=sumologic_audit.
  3. To see which user is sending scheduled searches to Webhooks, set sourceuser to display in the field browser
  4. Check the Message field for information about a Webhook connection working or failing.