Sumo Logic Monitoring and Analytics Platform

What do you like best about the product?

What I like most about Sumo Logic is how much it helps me work faster and more effectively during day-to-day monitoring and incident investigations. Its dashboards give me a quick view of what is happening across production environments, while powerful queries help me drill into logs, identify patterns, validate alerts, and find the root cause of issues. Reusable queries also save me time by making common investigations much more efficient. Most importantly, Sumo Logic helps me quickly understand whether an issue could impact customers and provide clear, actionable information to the right engineering teams. It gives me the visibility and tools I need to move from detection to investigation and escalation with greater confidence.

What do you dislike about the product?

The biggest downside for me is the learning curve for advanced queries and troubleshooting. When working with complex log structures or trying to build a query from scratch, it can take time to get the syntax and filtering exactly right. Some investigations also require multiple queries or deeper knowledge of how the data is indexed and structured. I’d like to see more intuitive query-building assistance, clearer guidance for complex use cases, and easier ways for newer users to discover relevant fields and existing queries. These are relatively minor compared with the visibility and troubleshooting capabilities Sumo Logic provides, but improving them would make the platform faster and easier to use for day-to-day monitoring.

What problems is the product solving and how is that benefiting you?

Sumo Logic helps me quickly monitor and troubleshoot complex cloud environments. For example, when I receive an alert about a production service, I can use a Sumo Logic dashboard to immediately review related logs and signals, then run targeted queries to determine whether the issue is isolated or could affect multiple customers or services. I can look for error patterns, abnormal activity, and related events without manually searching through multiple systems. Reusable queries and dashboards also make recurring investigations much faster and more consistent. This helps me quickly validate alerts, identify the likely root cause, and provide actionable details when escalating an issue to SRE or DevOps. The biggest benefit to me is speed and visibility: Sumo Logic helps me understand what is happening in production sooner, prioritize potential customer impact, and take the right action before an issue becomes a larger incident.

Recommendations to others considering the product:

To enhance user experience, Sumo Logic could introduce more intuitive query-building tools and provide clearer guidance for complex use cases. Offering tutorials or interactive guides for new users would also be beneficial. Additionally, simplifying the process of discovering relevant fields and existing queries could significantly reduce the learning curve, making the platform more accessible and efficient for day-to-day monitoring.

What do you like best about the product?

What I like most about Sumo Logic is how flexible and fast it is when integrating with different tools. Even when there isn’t a pre-built app available, we can usually find a way to ingest logs from virtually any platform.

Mobot has also made working with the platform much easier, especially for building complex queries and handling other day-to-day Sumo Logic tasks. It has significantly reduced the time and effort needed to get things done.

What do you dislike about the product?

One area I would suggest improving is the user interface. The platform is very powerful, but some areas of the interface could be more modern and visually appealing, making the overall user experience more intuitive and engaging.

What problems is the product solving and how is that benefiting you?

Sumo Logic is helping us centralize security visibility across 140+ sources, improve detection and alert triage, and automate repetitive security tasks. This gives our team better visibility, faster investigations, and more efficient day-to-day security operations.

What do you like best about the product?

Easy to use and saves time and gives faster results

What do you dislike about the product?

So far good. I will check eloborately and let know

What problems is the product solving and how is that benefiting you?

time saving

What do you like best about the product?

We run observability for dozens of isolated production environments across AWS, OCI, and Azure with a small DevOps/SRE team, and Sumo Logic is the only reason that scales. Everything lands in one org: Kubernetes clusters on EKS and OKE, cloud audit logs, endpoint and identity telemetry, on-prem Windows infrastructure. Incident triage starts in one search box instead of a "which cluster is that log in?" hunt. The API-first design is the underrated part — we generate Terraform from the live org via the API and manage our entire collector estate as code, and onboarding a new client environment dropped from 5–6 weeks to about one. Scheduled Views keep our SLA reporting cheap, the AI anomaly monitors catch what static thresholds miss, and the Flex pricing model with tiered partitions finally let us match spend to data value.

What do you dislike about the product?

The query language has a real learning curve for engineers coming from other stacks, and the Terraform provider occasionally lags behind newer platform features, which matters if you manage everything as code like we do. Content management (folders, dashboards) via API is clunkier than collector management. None of these are dealbreakers — but they're the rough edges.

What problems is the product solving and how is that benefiting you?

It replaced six separately managed Elasticsearch clusters — all the patching, scaling, securing, and backups went to zero. One platform now covers log analytics, metrics, SLA reporting, and anomaly detection across every client environment we operate, under SOC 2 with PCI-scoped separation. Our client roster has multiplied since 2020; the team running observability has not.

What do you like best about the product?

Mobot does not process or share our log data with any third party. All Sumo Logic AI capabilities operate within industry-recognized security frameworks, which is a huge bonus for a software company like ours and helps us reduce the risk of data breaches.

What do you dislike about the product?

Most of the time, I end up showing up in the Top 100 users because of partition log issues. If, by default, logs could go to T1 or T3 based on the queries, it would help new users avoid wasting data.

What problems is the product solving and how is that benefiting you?

The key benefits include less time spent identifying root causes, faster incident triage, more proactive backlog monitoring, and improved operational efficiency. With SumoMobot AI, we can generate queries, correlate logs and metrics, summarize trends, and speed up investigations. This helps our support teams resolve customer issues more quickly and spend more time on higher-value work.