> For the complete documentation index, see [llms.txt](https://docs.pagerly.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.pagerly.io/incidents-and-alerting/integrations/sumo-logic.md).

# Sumo Logic

### Create the integration in Pagerly

1\. Navigate to <https://workspace.pagerly.io/inbound> and click **"Add Inbound Integration"**.

2\. Set a display name, select the team this integration belongs to, choose the integration below, and click **"Add Integration"**.

3\. Copy the generated webhook URL - you will paste it into the tool in the next section.

### Configure Sumo Logic

1\. In Sumo Logic go to **Manage Data → Monitoring → Connections**, click **+** and select **Webhook**.

2\. Give the connection a name, and paste the Pagerly webhook URL into **URL**.

3\. Paste this into **Alert payload**:

```json
{
  "title": "{{Name}}",
  "description": "{{Description}}",
  "source_url": "{{AlertResponseURL}}",
  "status": "firing",
  "deduplication_key": "{{Id}}",
  "metadata": {
    "monitor_type": "{{MonitorType}}",
    "detection_method": "{{DetectionMethod}}",
    "trigger": { "type": "{{TriggerType}}", "condition": "{{TriggerCondition}}" }
  }
}
```

4\. Paste this into **Resolve payload** - identical apart from `status`:

```json
{
  "title": "{{Name}}",
  "description": "{{Description}}",
  "source_url": "{{AlertResponseURL}}",
  "status": "resolved",
  "deduplication_key": "{{Id}}",
  "metadata": {
    "monitor_type": "{{MonitorType}}",
    "detection_method": "{{DetectionMethod}}",
    "trigger": { "type": "{{TriggerType}}", "condition": "{{TriggerCondition}}" }
  }
}
```

5\. Click **Test Alert**, then **Test Recovery** to confirm the incident resolves. Save the connection.

### Notes

* Sumo Logic sends recovery through a **separate payload**. If you skip step 4, incidents open but never resolve.
* **Deduplication** uses `deduplication_key` (`{{Id}}`).
* **Severity** comes from `metadata.trigger.type`: `Critical` maps to SEV 1, `Warning` and `MissingData` to SEV 2.