Sumo Logic for SonicWall

Sumo Logic Community Content built for SonicWall that is not published to the App Catalog.

This is a dashboard and parser for SonicWall appliances. The dashboard partially utilizes the parsers as well as the Optimized Threat Intelligence scheduled view for IP addresses.

To use the content:

• Download the JSON file(s).
• Find/replace all Source Categories within the JSON with your own Source Category (Ex: sourceCategory=yourSourceCategory).
• Import the content to your desired folder location in Sumo Logic.

Collection:

For instructions on how to collect logs and metrics for use with content, please see Sumo Logic Documentation.

The SonicWall dashboard has a threat section for threats detected by the Integrated Threat Intelligence on IP addresses. This panel relies upon the Scheduled Views in the Threat Intel Quick Analysis - Optimized app.

To upload your own content:

Please see Sumo Logic Community Ecosystem Apps FAQs.

To add review/comment to content:

Please provide a review/comment for this content by following the guidelines below:

• Select the Comments folder.

• Open the Comments.json file.

• Select Edit (pen icon).

• Add a new line below the current comments, and paste in your review/comment using the following schema:

    {
        "reviewer":"[githubid/name]",
        "ratings":{
            "overall":4,
            "use-case":5,
            "design":4,
            "technical":4
        },
        "review":"This app is very useful for knowing x, y, and z. It would be great if the dashboards were broken out by use case instead of being one big dashboard."
    }
  

• Select Propose New Changes.

• Submit Pull Request.

Code owners will review and merge your comments on the content to the repo.

Please see How to add a review/comment to an app for more information.