Today, we’re excited to publish a reference solution for moving logs from Oracle Cloud Infrastructure (OCI) into Sumo Logic, a popular SIEM (Security Information and Event Management) solution.
With the Oracle Cloud Observability and Manageability platform, we aim to meet our customers where they are. We understand that customers may have standardized their operations with third-party tools. We want to be interoperable with those tools to enable customers to easily adopt OCI with minimal retraining, re-architecture, and change in processes. This blog enables joint OCI and SumoLogic customers to use their existing investments for ingesting and analyzing OCI logs in SumoLogic.
This solution uses the newly released Oracle Cloud Infrastructure Service Connector Hub to read logs from OCI Logging and invoke Oracle Functions to ingest logs into SumoLogic. For detailed steps about OCI and Sumo Logic Integration, please see detailed instructions here.
OCI Logging is a cloud-native, fully managed, distributed logging platform that simplifies ingesting, managing, and analyzing logs from your entire stack. OCI Logging leverages open CloudEvents standard, making it easy for interoperability as well as helps in avoiding vendor lock-in. The service brings all your logs(infrastructure, application, audit, and database) into one view. To learn more about Logging, see Announcing the general availability of Oracle Cloud Infrastructure Logging.
OCI Service Connector Hub moves data between services, both within OCI and from OCI to third-party tools. For extra processing and compliance storage needs, it moves data, such as logs from Logging, to services such as OCI Object Storage, OCI Streaming, and OCI Monitoring. It triggers functions for custom data processing and sends notifications about changes to cloud resources. To learn more about Service Connector Hub, see Oracle Cloud Infrastructure Service Connector Hub now generally available.
Oracle Functions is a fully managed, multi-tenant, highly scalable, on-demand, Functions-as-a-Service platform. To learn more about Oracle Functions, see the documentation.
In closing, this blog demonstrated how you can ingest logs from OCI Logging into SumoLogic using Service Connector Hub and Oracle Cloud Functions. You can use the same reference architecture to build any third-party integrations to solve your specific use cases.
We welcome you to sign up for the Oracle Cloud Free Trial or sign in to your account to experience this integration. We can't wait to see what you build.