Create and Manage Organizations (Service Providers)

Availability

Account Type	Account Level
Credits	Enterprise Operations, Enterprise Security, Enterprise Suite

note

This feature is not enabled by default. If you’d like to have it enabled, contact your Sumo Logic Account Executive.

This topic has information about Sumo Logic’s Organizations (“Sumo Orgs”) feature for Sumo Logic Service Providers. Sumo Orgs allows you to logically group, provision, and centrally manage and monitor the credits usage of multiple orgs. We use the term parent org to refer to the org from which you create and manage orgs, and child orgs to refer to the orgs you create. 

As a Service Provider, you can create two types of child orgs:

• You can create POV (Proof of Value) Trial orgs for your prospects to access in order to evaluate Sumo Logic. For more information, see About POV Trial orgs.
• You can create child orgs, either for use within your own company or for customers who are not going to trial Sumo Logic before subscribing.

In either case, the child orgs you create will be the same plan type as the parent org. For example, if you have an Enterprise Suite plan, the child orgs you create will also be Enterprise Suite accounts. 

When you create a child org, you provision it with credits, based on the ingest volume you estimate for the org. We refer to the different flavors of ingest—Continuous Log Ingest, Frequent Log Ingest, and so on—as product variables. When you provision a child org you use a Credits Calculator to estimate and allocate required credits for each product variable.

We refer to your estimates of ingest capacity required for each product variable as baselines. Sumo Logic’s throttling multipliers for logs and metrics are based on these estimates. (For example, if you estimate 1GB usage for logs and specify that as the "baseline" when you create the org, Sumo Logic will start throttling when ingestion to the org reaches 4 to 10 times the baseline. The multiplier depends on your account size.)

Users that have the required role capabilities can create child orgs under a parent org, and manage and monitor the allocation and consumption of Sumo Logic credits across orgs, and for each child org. This functionality is available in the Sumo Logic UI at Administration > Organizations and also in the Organizations Management API.

About CSE provisioning

You can enable and provision CSE for a child org. Note that the process of provisioning CSE can take up to 24 hours. For more information, see Monitor CSE Provisioning, below.

Requirements for creating and managing orgs

There are several role capabilities that are required to work with orgs:

• View Organizations. This capability is required to view the Organizations UI.
• Create Organizations. This capability is required to create or provision child organizations.
• Change Credits Allocation. This capability is required to change the credits allocation and baselines for a child organization. 
• Create Trial Organizations. This capability is required to create and provision trial organizations. 
• Upgrade Trial Organizations. This capability is required to upgrade POV Trial organizations. 
• Upgrade Trial Organizations. This capability is required to deactivate POV Trial organizations. 

About POV Trial orgs

POV Trial orgs you create will have a 45 day trial period. POV Trial orgs will be provisioned with the following ingestion limits.

• 5 GB Continuous tier ingest
• 5 GB Frequent tier ingest
• 5 GB Infrequent tier ingest
• 5,000 metric data points per minute (DPM) 
• 5 GB traces ingestion
• 5 GB Cloud SIEM Enterprise (CSE) ingest

note

The credits associated with the trial org allocations don’t impact the parent org’s credits allocation.

You can upgrade a trial org by editing the org and changing the Plan Type. When you upgrade a POV Trial org, if the org is in a different Sumo Logic deployment from the parent org, the Credits çalculator may add a deployment factor, which is a percentage upcharge that varies by deployment.

For more information, see Upgrade a POV Trial org below.

Create a POV Trial org

This section has instructions for creating a POV Trial org. 

note

After you create a child org, you can’t delete it.

1. Go to Administration > Organizations.
2. Click + Add Organization.
   
3. The Create New Organization pane appears.
   
4. Organization Name. Enter a unique name for the org.
5. Account Owner Email. Enter the name of the account owner.
6. Account Owner First Name. Enter the account owner’s first name.
7. Account Owner Last Name. Enter the account owner’s last name.
8. Deployment. Select a Sumo Logic deployment from the list. 
9. Plan Type. By default, “POV Trial” is selected. Leave it selected. 
10. Click View Allocation.
11. The Baselines popup appears, and displays the ingest limits for a POV Trial org. You cannot change the limits.
    
12. Click Done.
13. Click Save to save the new org.

Upgrade a POV Trial org 

1. Go to Administration > Organizations.
2. Click the row for the trial org you want to upgrade.
   
3. The right pane appears with information about the org. Click Edit.
   
4. In the edit pane, click Plan Type, and choose the Enterprise plan that appears as an option.
   
5. A warning message is shown that says you won’t be able to downgrade the org once you upgrade it.
   
6. Click Allocate Credits.
7. The Credits Calculator appears.
   
8. Continuous Log Ingest. Enter estimated daily ingestion to the Continuous tier.
9. Frequent Log Ingest. Enter estimated daily ingestion to the Frequent tier.
10. Infrequent Log Ingest. Enter estimated daily ingestion to the Infrequent tier.
11. Metrics. Enter estimated daily metric data points per minute (DPM) ingestion.
12. Tracing. Enter estimated daily ingestion of traces.
13. Cloud SIEM Enterprise. Click the checkbox to enable Cloud SIEM Enterprise (CSE).
14. If you enable CSE, the CSE Log Ingest field appears.
15. Enter a value in GB.
    note

    Provisioning CSE can take up to 24 hours. See Monitor CSE Provisioning, below.

16. As you enter the ingestion estimates, the number of credits required for the ingestion levels is incremented.
    
17. Click Use This Allocation.

Update an org's credits allocation

You can update an Enterprise org’s credits allocation, but not a Trial POV org.

1. To change an org's credits allocation
2. Go to Administration > Organizations.
3. Click the row for the org you want to edit.
4. Click Edit in the right hand pane.
   
5. Click Modify Allocation.
   
6. The Credits Calculator appears.
7. Follow steps in Upgrade a POV Trial org to finish.

Deactivate a POV Trial org

To deactivate a POV Trial org

1. Go to Administration > Organizations.
2. Click the row for the trial org you want to deactivate.
3. Click the three-dot more options menu and choose Deactivate.
   

Monitor CSE provisioning

Provisioning CSE can take up to 24 hours. You can determine provisioning status on the Administration > Organizations page. Until the provisioning is complete, you'll see a spinner and message that indicates the process is on-going.

Monitor credits quota and usage

This section has information about how you can monitor credit allocations and consumption across all your orgs, and for each child org.

View child credit usage by category

You can view the usage by child orgs on the Account Overview page. Usage for the following categories is shown:

• Continuous Ingest. Credits used for logs ingested into the Continuous tier.
• Frequent Ingest. Credits used for logs ingested into the Frequent tier.
• Infrequent Ingest. Credits used for logs ingested into the Infrequent tier.
• Infrequent Scan. Credits used to scan data for Infrequent tier searches.
• Tracing Ingest. Credits used for traces ingested.
• Metrics Ingest. Credits used for metrics ingested.
• Storage. Credits used for log storage in the Continuous and Frequent tiers.
• CSE Ingest. Credits used for logs ingested into Cloud SIEM Enterprise (CSE).
• Infrequent Storage. Credits used for log storage in the Infrequent tier.
• Promotional categories. For more information, see Monitoring Promotional Credit usage.
  

View cross-org credits allocation and consumption

You can see what portion of your subscription credits have been allocated and consumed on the Administration > Organizations page.

• The Usage % column indicates what percentage of overall subscription credits that was allocated to a child org has been consumed.
• The Credits Capacity line at the bottom of the page shows the count and percentage of  credits, out of your total subscription credits, that have been allocated to child orgs, and the number of allocated credits that have been consumed. 
  

View child org credits allocation and usage

1. Go to Administration > Organizations.
2. Click an org in the list of orgs.
3. A pane with details about the org appears on the right side of the page.
   
4. The Credits Usage section of the pane shows the number and percentage of the credits allocated to the org that have been consumed, along with the total credits that are allocated.
5. Click View Details for more information.
6. The Credits Usage Details popup displays the following information. This information is for the current contract subscription period.
   • Allocated Credits. The total number of credits allocated to the org.
   • Credits Used. The number and percentage of allocated credits that have been used.
   • For each Product Variable, the following information is shown.
     • Credits Used. Number of allocated credits that have been used for the Product Variable.
     • Deployment Charge. The number of credits associated with the Deployment Charge (as applicable), if the child org is in a different deployment than the parent org.
     • Credits Deducted. This column if the parent org is on a subscription to which cross-geo charging applies to the org. If the parent org is on Global Credits, deployment charges don’t apply and this column won't appear. Credits Deducted is the sum of Credits Used and the Deployment Charge.
     • Usage %. The percentage of credits allocated to the org that have been used for the Product Variable.
     • Units. Shows the volume of log ingest in GB or the DPM (metrics) that is equivalent to the credits used for the Product Variable.
       

Access a child org

If a custom subdomain has been configured for a child org, and you have an account in the org, you can access it from the Organizations UI.

1. Go to Administration > Organizations.
2. Click the row for the org you want to access.
3. Click Access Organization in the right hand pane.
   

Audit logging for organizations

This section has examples of the messages Sumo Logic writes to the Audit Event Index when you create, deactivate, and update an org.  

OrganizationCreated

{"operator":{"email":"PF6gIXhGj33LzP8Ba7kzJkL9EAtz6RuSMYHHKnqbEICUz7PITMdceGFRdQESZ2JwpL7BSbGaOaUYmgADz3USgExa7egWZ8UY2wmm","id":"000000000AEE3701","interface":"INTERNAL","sessionId":"no_session","sourceIp":"54.177.241.252","type":"UserContext"},"organizationIdentity":{"email":"pjain+1ljjjjjlwasdk@sumologic.com","organizationName":"akjdhfjkhwqiue","firstName":"kajsdfh","lastName":"sakjdsh","orgId":"000000000AF45F28","deploymentId":"nite"},"subscriptionDetails":{"startDate":{"year":2020,"month":12,"day":16},"endDate":{"year":2021,"month":5,"day":11},"plan":"SUMO-ENT-SUI","credits":4388,"baselines":{"continuousIngest":1,"continuousStorage":30,"frequentIngest":1,"frequentStorage":30,"infrequentIngest":1,"infrequentStorage":30,"infrequentScan":0,"metrics":1,"cseIngest":0,"cseStorage":0}},"eventType":"Audit","severityLevel":"Info","accountId":"000000000AE07391","eventId":"67718e94-a8a3-4478-b778-975cd0e18e55","eventName":"OrganizationCreated","eventTime":"2020-12-17T04:59:05.584Z","eventFormatVersion":"1.0 beta","subsystem":"organizations"}

OrganizationUpdated

{"operator":{"email":"rmVOQ8CwUBuxqDydSLIV2ZljEogPcR7fwZiIShCBldZ5jhEl1c4wLHJhL1j6xkzVPVuqVJFf1c5VUvOMESv4ieY0xrxuVET6JXTw","id":"000000000B0858AE","interface":"INTERNAL","sessionId":"no_session","sourceIp":"122.181.102.148","type":"UserContext"},"organizationIdentity":{"email":"fkonkpjg3z@mail.peaksum.com","organizationName":"QEV9Z3Z","firstName":"ne3ieXF","lastName":"85lZdXD","orgId":"000000000AF35705","deploymentId":"nite"},"from":{"continuousIngest":200,"continuousStorage":30,"frequentIngest":200,"frequentStorage":30,"infrequentIngest":200,"infrequentStorage":30,"infrequentScan":0,"metrics":200,"cseIngest":0,"cseStorage":0},"to":{"continuousIngest":201,"continuousStorage":30,"frequentIngest":200,"frequentStorage":30,"infrequentIngest":200,"infrequentStorage":30,"infrequentScan":0,"metrics":200,"cseIngest":0,"cseStorage":0},"eventType":"Audit","severityLevel":"Info","accountId":"000000000AE07391","eventId":"2f816b83-3f10-434f-b5b9-e73aa223fd5d","eventName":"OrganizationUpdated","eventTime":"2020-12-16T11:29:53.428Z","eventFormatVersion":"1.0 beta","subsystem":"organizations"}

OrganizationDeactivated 

{"operator":{"email":"NXFzffOzayF9XOB5Rr3VotNkucC0qGCBNtvbvFnzc3Fx7TNYDqE57JT0JH2c11SZzXvQ1ja3uEoxdkH7aNUMzjva8KZlAzRVARmO","id":"000000000B077FF9","interface":"INTERNAL","sessionId":"no_session","sourceIp":"54.176.19.217","type":"UserContext"},"organizationIdentity":{"email":"ritesh@demo.com","organizationName":"Riteshtestemail","firstName":"Ritesh","lastName":"Kumar","orgId":"000000000AF43E5B","deploymentId":"nite"},"eventType":"Audit","severityLevel":"Info","accountId":"000000000AE07391","eventId":"4b23e75c-6ae7-4a19-865e-5f1a89b26823","eventName":"OrganizationDeactivated","eventTime":"2020-12-15T17:59:28.146Z","eventFormatVersion":"1.0 beta","subsystem":"organizations"}