Sumo Logic HTTP log source

An HTTP Logs Source is an endpoint for receiving log and metric data uploaded to a unique URL generated for the Source. The URL securely encodes the Collector and Source information. You can add as many HTTP Logs and Metrics Sources as you'd like to a single Hosted Collector. 

See the official Sumo Logic documentation for further information.

Configuration

• HTTP endpoint URL: the URL of the Sumo Logic endpoint. e.g. https://endpoint1.collection.<region>.sumologic.com/receiver/v1/http/<token>
• Event format: the event format, for Sumo Logic the default format is %message%

Timestamp

The message timestamp (Received on property) is automatically parsed when the message is received.

 When you create a new HTTP logs source, you have to expand the Advanced Options for Logs (Optional) section and specify the timestamp format

• Format: yyyy-MM-dd'T'HH:mm:ssZZZZ
• Timestamp locator: "receivedOn":"(.*?)"