MCP Sumo Logic

What is MCP Sumo Logic?

A Model Context Protocol server that integrates with Sumo Logic's API to perform log searches, designed for users needing to query Sumo Logic logs via an MCP-compatible client.

How to use MCP Sumo Logic?

Clone the repository, install dependencies (npm install), create a .env file with required environment variables, build (npm run build), and start (npm start). Alternatively, use the provided Docker setup. The server exposes a search-sumologic tool that accepts parameters query, from (optional), and to (optional).

Key features of MCP Sumo Logic

• Search Sumo Logic logs using custom queries
• Configurable time ranges for searches
• Error handling and detailed logging
• Docker support for easy deployment

Use cases of MCP Sumo Logic

• Query application logs from Sumo Logic within a specific time window
• Automate log analysis workflows with an MCP-compatible client
• Troubleshoot incidents by fetching logs for a given period

FAQ from MCP Sumo Logic

What environment variables are required?

You must set ENDPOINT (Sumo Logic API endpoint), SUMO_API_ID, and SUMO_API_KEY. These can be passed via a .env file or directly as Docker environment variables.

How do I specify a time range for a search?

The search-sumologic tool accepts optional from and to parameters in ISO 8601 format (e.g., 2024-02-23T00:00:00Z).

What transport or authentication does the server use?

It connects to Sumo Logic’s HTTP API using API ID and API key authentication.

What are the runtime dependencies?

The server requires Node.js and runs with npm install and npm start. Docker is also supported for containerized deployment.

Is there development or testing support?

Yes, the repository supports development mode (npm run dev) and tests (npm test).