Listing Thumbnail

    Logs for Security (AWS Built-In)

     Info
    Deployed on AWS
    Monitor your entire AWS environment in minutes. Sumo Logic integrates with your AWS SaaS services, providing unparalleled visibility into your cloud infrastructure and security data at scale.
    4.3

    Overview

    Logs for Security provides a unified security and compliance audit view of your AWS infrastructure and insight into threat activity across that environment. It leverages native AWS tools and telemetry to accelerate the work of development, operations, security, and reliability management teams in maintaining security, monitoring their environment, and managing their risk and attack surface.

    Modern ever-changing cloud environments need ongoing audits of configuration, vulnerability, versioning, activity, and other factors to ensure they are well maintained and not subject to vulnerability created by aging or drifting configuration, access rights, or software. Logs for Security helps teams get rapid, ongoing security visibility into the diverse aspects of their environment and provides customizable alerting, evaluation, and remediation of issues.

    Sumo Logic rapid onboarding process makes setup easy, allowing AWS users to visualize and begin improving the security posture of their environments in minutes.

    New Sumo Logic AWS Built In automation and integration. An AWS Certified deployment that reduces the time and effort to configure your multi-account environment, starting with AWS Control Tower and key Cloud Foundational Services to achieve a stronger security posture that drives efficiency and reduces risk in your business critical applications.

    The price below is for a two year subscription to ingest up to 5 GB per day. If you require more than 5 GB per day, please contact your AWS sales representative.

    Highlights

    • Unified security visibility and analytics across your entire AWS environment using native and 3rd-party data sources.
    • Integrated threat intel which accelerates threat detection and reduces the time to detect and investigate
    • Global Intelligence Service that creates statistical baselines for Amazon GuardDuty and AWS CloudTrail to help accurately pinpoint investigations and resources

    Details

    Delivery method

    Deployed on AWS
    New

    Introducing multi-product solutions

    You can now purchase comprehensive solutions tailored to use cases and industries.

    Multi-product solutions

    Features and programs

    Buyer guide

    Gain valuable insights from real users who purchased this product, powered by PeerSpot.
    Buyer guide

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    Logs for Security (AWS Built-In)

     Info
    Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    24-month contract (1)

     Info
    Dimension
    Description
    Cost/24 months
    5GB/Day Ingest
    5GB/day ingest with 365 days retention
    $13,350.00

    Vendor refund policy

    Please see seller website for refund details.

    Custom pricing options

    Request a private offer to receive a custom quote.

    How can we make this page better?

    Tell us how we can improve this page, or report an issue with this product.
    Tell us how we can improve this page, or report an issue with this product.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    Software as a Service (SaaS)

    SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.

    Support

    Vendor support

    Start by visiting Sumo Logic Support at https://support.sumologic.com/support/s/  or email us directly at support@sumologic.com 

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Product comparison

     Info
    Updated weekly

    Accolades

     Info
    Top
    100
    In Log Analysis
    Top
    25
    In Data Security and Governance

    Customer reviews

     Info
    Sentiment is AI generated from actual customer reviews on AWS and G2
    Reviews
    Functionality
    Ease of use
    Customer service
    Cost effectiveness
    Positive reviews
    Mixed reviews
    Negative reviews

    Overview

     Info
    AI generated from product descriptions
    Unified Security Visibility
    Provides unified security and compliance audit view across entire AWS infrastructure using native and third-party data sources with analytics capabilities
    Threat Intelligence Integration
    Integrates threat intelligence to accelerate threat detection and reduce time to detect and investigate security incidents
    Statistical Baseline Analysis
    Leverages Global Intelligence Service that creates statistical baselines for Amazon GuardDuty and AWS CloudTrail to pinpoint investigations and resources
    Multi-Account Environment Configuration
    Supports AWS Certified deployment with AWS Control Tower integration for automated configuration of multi-account environments
    Customizable Security Alerting
    Provides customizable alerting, evaluation, and remediation capabilities for configuration, vulnerability, versioning, and activity monitoring
    Threat Detection Engine
    Library of 900+ out-of-the-box detections with user and attacker behavior analytics backed by community threat intelligence
    Data Ingestion and Integration
    Ingests CloudTrail, GuardDuty, EC2 network traffic, raw logs via SQS from multiple AWS accounts, on-premises networks, remote endpoints, and SaaS solutions
    Investigation and Response Capabilities
    Visual investigation timeline with detailed log timelines, automated response workflows, and instant actions such as asset quarantining
    Deception Technology
    Honeypots, honey credentials, and honey files for layered defense mechanisms
    Compliance and Monitoring
    File Integrity Monitoring (FIM) with support for PCI, HIPAA, and GDPR compliance requirements, plus detection of new AWS regions, services, and EC2 instance types
    Real-time Data Collection and Indexing
    Collects and indexes machine-generated data from virtually any source or location in real time with immediate search and analysis capabilities.
    Multi-deployment Visibility
    Provides single-pane-of-glass visibility across on-premise and cloud deployments, enabling centralized monitoring across hybrid environments.
    AWS Service Integration
    Supports integration with AWS services including CloudTrail, Config, and VPC Flow Logs for comprehensive AWS environment monitoring.
    Pre-built Application Support
    Includes support for Splunk apps with pre-defined views for leading technologies such as Linux, Windows, and VMware.
    FedRAMP Authorization
    Maintains FedRAMP Moderate authorization for compliance with federal security standards.

    Contract

     Info
    Standard contract
    No
    No
    No

    Customer reviews

    Ratings and reviews

     Info
    4.3
    400 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    60%
    37%
    3%
    0%
    1%
    6 AWS reviews
    |
    394 external reviews
    External reviews are from G2  and PeerSpot .
    Ewan M.

    Real-Time Search and Smart Alerts That Save Hours

    Reviewed on Apr 20, 2026
    Review provided by G2
    What do you like best about the product?
    What I value most is the real-time search capability. On top of that, the smart alerts have been a huge advantage. I save hours of browsing thanks to its Logreduce feature, which is a massive benefit.
    What do you dislike about the product?
    The learning curve is quite steep, and it requires time to get used to.
    What problems is the product solving and how is that benefiting you?
    I used to waste too much time, but this tool centralized everything and helped detect a bottleneck in our API that was causing outages. It’s been a lifesaver, and now I can finally relax.
    amol a.

    Cuts Alert Fatigue with Clear Summaries, but Data Source Onboarding Feels Clunky

    Reviewed on Apr 16, 2026
    Review provided by G2
    What do you like best about the product?
    As a software engineer, what I like best is that Dojo AI actually reduces alert fatigue in a meaningful way. The Summary Agent gives my team a clean, readable explanation of what triggered each Insight, instead of everyone digging through 40 lines of raw log data, they get a clear summary of the key signals, scope, and context.
    What do you dislike about the product?
    Onboarding new data sources can still feel clunkier than it should be. We added a new SaaS tool to our stack last quarter and getting the logs flowing correctly into Sumo Logic took almost a full week of back-and-forth with documentation and support
    What problems is the product solving and how is that benefiting you?
    We had a serious siloing problem. Our security team, DevOps team, and infrastructure team were all working off different tools with different data views, and whenever an incident happened, the first 30 minutes were always wasted just getting everyone on the same page. Sumo Logic solved that by becoming our single source of truth for all telemetry
    Dylan G.

    Effortless Monitoring with Some Interface Hiccups

    Reviewed on Apr 14, 2026
    Review provided by G2
    What do you like best about the product?
    I appreciate how easy it is to use Sumo Logic. This ease of use makes it possible for us to teach the tool to new users quickly. The initial setup was also easy, which is a big plus.
    What do you dislike about the product?
    The interface could be improved to make it easier to use.
    What problems is the product solving and how is that benefiting you?
    I use Sumo Logic for monitoring internal systems. It solves gathering information and lets us get the inside scoop on things as they happen.
    Nitish U.

    Fast, Fluid UI with Quick Queries and Easy Dashboards

    Reviewed on Apr 14, 2026
    Review provided by G2
    What do you like best about the product?
    The UI feels faster and more fluid. Queries run quickly, and dashboards are straightforward to create.
    What do you dislike about the product?
    It’s expensive compared to other options, and the integration capabilities feel limited. Overall, it seems too broad for what I need, and large queries don’t run reliably.
    What problems is the product solving and how is that benefiting you?
    Centralised monitoring and logging that helps with RCA analysis, as well as dashboarding and reporting for WAF and API discovery.
    Sudhakar I.

    MoBot’s AI-Guided Assistance Makes Observability and Security Workflows a Breeze

    Reviewed on Apr 14, 2026
    Review provided by G2
    What do you like best about the product?
    As a solution architect, what impressed me most was MoBot. Having an AI-guided assistant that helps you navigate observability and security workflows, write queries, and even refine them with suggestions and nice UI experience, That's a game changer, especially for someone who's still getting comfortable with complex log queries.
    What do you dislike about the product?
    While Sumo Logic is incredibly powerful, it can feel overwhelming when you first get started. There's just so much to take in metrics, logs, Cloud SIEM, automation, MoBot, and without proper training, it's easy to feel lost navigating the platform
    What problems is the product solving and how is that benefiting you?
    We struggled with sharing visibility across teams, integration with external tools like Auth0, but the ability to build, export, and import dashboards means stakeholders across security and operations are now working from the same data, resulting in better collaboration and faster decision-making.
    View all reviews