ServiceNow and Sumo Logic

Security and observability needs are morphing, and organizations must match this fast-paced world and identify and respond to incidents faster than ever — or risk costly outages, negative customer experiences and security breaches. As a result, it’s increasingly important that we make it easier for our customers to monitor and secure their modern IT environments using our Continuous Intelligence Platform and Cloud SIEM while also seamlessly integrating with their security and operations workflows to increase productivity and improve the employee and customer experiences. Our partnership with ServiceNow achieves exactly this and we are excited to bring this relationship to our joint customers with a set of comprehensive solutions and integrations.

Sumo Logic’s Service Graph Connector for ServiceNow enables customers to effectively manage their modern digital product and services lifecycles by:

• Ingesting auto-discovered, ephemeral AWS and VMware asset data from Sumo Logic’s observability solution to update the ServiceNow Configuration Management Database (CMDB) in real time.

• Extending the CMDB system of record beyond traditional IT operations, giving IT teams more context and visibility into modern application development, deployment and operational processes.

• Driving more efficient triage and risk management for security operations teams through automated enrichment of security incidents with asset data collected by the Service Graph Connector.

Sumo Logic’s deep integration with ServiceNow's Security Incident Response allows for real-time ingestion and transformation of Sumo Logic Cloud SIEM Insights into ServiceNow’s platform as Security Incidents. Incidents that have been created through periodic polling of Sumo Logic’s Cloud SIEM are automatically enriched with indicators of compromise and associated MITRE ATT&CK techniques identified by Sumo Logic, providing valuable context to security operations teams, improving mean-time-to-response and enabling more rapid and robust investigation of the incident. Install the free integration on the ServiceNow® Store to get started.

Sumo Logic’s cloud-native webhook integrations with ServiceNow makes it easier than ever for IT and Security Ops teams to manage events and security incidents at scale with powerful automation and context. These integrations for ITOM, ITSM and Security Incident Response now also support auto-resolution when a triggered condition resolves itself, making it easier than ever to leverage Sumo Logic’s Continuous Intelligence Platform to proactively investigate anomalous activities, reduce user impact and increase productivity by delivering reliable, secure apps and IT services.