Getting started
Basics
Domains & Origins
Performance

Configuration
Basics
Conditions
Dictionaries
Domains & Origins
Request settings
Cache settings
Headers
Responses
Performance
Custom VCL
Image optimization
Video

Security
Access Control Lists
Monitoring and testing
Securing communications
Security measures
TLS
Web Application Firewall

Integrations
Logging endpoints
Non-Fastly services

Diagnostics
Streaming logs
Debugging techniques
Common errors

Account info
Account management
Billing
User access and control

Reference

    Log streaming: Sumo Logic

      Last updated May 31, 2019

    Fastly's Real-Time Log Streaming feature can send log files to Sumo Logic. Sumo Logic is a web-based log analytics platform used by developers and IT teams.

    Setting up Sumo Logic

    To use Sumo Logic as a logging endpoint, you'll need to create a Sumo Logic account, add a new source, and save the HTTP Source URL. Follow these instructions to add a new source in the Sumo Logic website:

    1. The process starts with the Sumo Logic Setup Wizard, which appears immediately after you create your Sumo Logic account. If you already have an account, you can access the wizard by selecting Setup Wizard from the Manage menu at the top of the Sumo Logic application.

      Sumo Logic Setup Wizard

    2. Click Set Up Streaming Data. The Select Data Type window appears.

      Sumo Logic Data Type window

    3. Click All Other Sources. The Set Up Collection window appears.

      Sumo Logic Set Up Collection window

    4. Click HTTP Source. The Configure Source: HTTP Source window appears.

      Sumo Logic Configure Source: HTTP Source window

    5. In the Source Category field, type a human-readable name for the category (e.g., fastly_cdn) and select a time zone for your log file.
    6. Click Continue. The HTTP Source URL appears.

      Sumo Logic Configure Source: HTTP Source window with HTTP Source URL

    7. Copy the HTTP Source URL. You will enter this value in the Fastly web interface.
    8. Click Continue. Sumo Logic will add the new source.

    Adding Sumo Logic as a logging endpoint

    After you've created a Sumo Logic account and obtained the HTTP Source URL, follow these instructions to add Sumo Logic as a logging endpoint for Fastly services:

    1. Review the information in our Setting Up Remote Log Streaming guide.
    2. Click the Sumo Logic logo. The Create a Sumo Logic endpoint page appears.

      the create a Sumo Logic endpoint page

    3. Fill out the Create a Sumo Logic endpoint fields as follows:
      • In the Name field, type a human-readable name for the endpoint.
      • In the Log format field, optionally type an Apache-style string or VCL variables to use for log formatting. The Apache Common Log format string appears in this field by default. Our discussion of format strings provides more information.
      • In the Collector URL field, type the address of the HTTP Source URL you found in the Sumo Logic website.
    4. Click the Advanced options link of the Create a Sumo Logic endpoint page and decide which of the optional fields to change, if any.

      the advanced options on the create a Sumo Logic endpoint page

    5. Fill out the Advanced options of the Create a Sumo Logic endpoint page as follows:
      • In the Select a log line format area, select the log line format for your log messages. Our guide on changing log line formats provides more information.
      • In the Placement area, select where the logging call should be placed in the generated VCL. Valid values are Format Version Default, None, and waf_debug (waf_debug_log). Selecting None creates a logging object that can only be used in custom VCL. See our guide on WAF logging for more information about waf_debug_log.
    6. Click the Create button to create the new logging endpoint.
    7. Click the Activate button to deploy your configuration changes.

    Troubleshooting

    The Sumo Logic logging endpoint is designed for services with sustained levels of traffic. If you aren't seeing any logs in Sumo Logic, try waiting a bit.

    Back to Top