There are many data dimensions we store with sumo logic. Many of these are just IDs for data not stored with sumo logic. We do not want to re-create a search interface on the data using the search api. Yours works great. What we do want to do is from a dashboard or system we own, be able to build a query based on an organization or whatever, and link to a query in sumologic for the organization.
A good way to think about this is say we have a dashboard that shows a list of organizations by name. I could select one of these organizations, and see a button that would say "query sumologic for this org". If clicked, the user would be sent to sumologic with a search already set to query by "organizationId=12345 and env=dev" or something similar.
I would see the link looking something like this. https://service.sumologic.com/ui/?q=env%3Ddev+and+organizationId%3Dsomeorgid
That search is just "env=dev and organizationId=someorgid" url encoded and assigned to "q"
Please sign in to leave a comment.