sumologic-slack 1.0.3

Sumo Logic collection solution for slack

sumologic-slack

Solution to pull logs from Slack to Sumo Logic

Installation

This collector can be deployed both onprem and on cloud.

Deploying the collector on a VM

1. Get Token from Slack for your workspace/Team.

   • Token and Authentication details from slack
   • Generating a Slack API token

2. Add a Hosted Collector and one HTTP Logs Source

   • To create a new Sumo Logic Hosted Collector, perform the steps in Configure a Hosted Collector.
   • Add an HTTP Logs and Metrics Source.

3. Using the sumologic-slack collector

   • Method 1 - Configuring the sumologic-slack collector

     Below instructions assume pip is already installed if not then, see the pip docs on how to download and install pip. sumologic-slack is compatible with python 3.7 and python 2.7. It has been tested on Ubuntu 18.04 LTS and Debian 4.9.130. Login to a Linux machine and download and follow the below steps:

     • Install the collector using below command pip install sumologic-slack

     • Create a configuration file named slackcollector.yaml in home directory by copying the below snippet.

       Slack:
           TOKEN: <Paste the URL for the SLACK API TOKEN from step 1.>
       
       Collection:
           BACKFILL_DAYS: <Enter the Number of days before the event collection will start.>
       
       SumoLogic:
           HTTP_LOGS_ENDPOINT: <Paste the URL for the HTTP Logs source from step 2.>
       

   • Create a cron job for running the collector every 5 minutes by using the crontab -e and adding the below line

     */5 * * * * /usr/bin/python -m sumoslack.main > /dev/null 2>&1

   • Method 2 - Collection via an AWS Lambda function

     To install Sumo Logic’s AWS Lambda script, follow the instructions below:

     • Go to https://serverlessrepo.aws.amazon.com/applications

     • Search for “sumologic-slack” and select the app as shown below:

     • In the Configure application parameters panel, shown below:

       Token: Paste the URL for the SLACK API TOKEN from step 1.
       HttpLogsEndpoint: Paste the URL for the HTTP Logs source from step 2.
       BackfillDays: Enter the Number of days before the event collection will start
       

     • Click Deploy.