Sumo Logic Log Analytics Platform (Pay-As-You-Go with 30-day Free Trial)

What do you like best about the product?

SumoLogic processing events efficiently and quickly. The UI changes have generally been an improvement. The organization is better. Recent Mobot changes have been a noticeable upgrade in capability. Mobot has saved me significant time in understanding events even identify activity that I'm not sure I would have noticed. The support team is excellent and readily available. They have acted as a true partner, contributing to operation of Sumo and not just supporting through one question at a time.

What do you dislike about the product?

Collectors can not be marked as inactive. A collector will show green for healthy but that can be misleading. A collector should have an active/inactive indicator to mark those sources either not configured or no longer in use. Mobot usage is limited as it is still in beta. Instructions can not be applied to Mobot and there are capabilities it does not have, e.g. it can not update a monitor.

What problems is the product solving and how is that benefiting you?

My company uses a number of firewalls, Sumo is able to identify the firewalls in use across the business units. We implemented a number of traffic blocks for sanctioned countries, Sumo is able to track and report on anonymous activity with those countries. Resulting in Incidents for concerning behavior to be further investigated.

What do you like best about the product?

Cloud-native, no infrastructure to manage: There are no servers to maintain, and it scales with log volume.
Powerful search and query language: You can parse, filter, and aggregate logs quickly, and saved searches and dashboards make recurring analysis easy.
Unified logs, metrics, and traces: One platform covers observability and security monitoring.
Built-in security analytics: Its cloud SIEM features and pre-built apps for AWS, Kubernetes, and others speed up setup.
Real-time alerting: Alerts and dashboards help teams catch issues early and cut troubleshooting time.
Integrations: It connects with most major cloud services and DevOps tools.

What do you dislike about the product?

Cost: Pricing can climb quickly as log volume grows, and many users find it hard to predict or control spend.
Learning curve: The query language is powerful but takes time to learn, especially for complex parsing and aggregation.
Performance on large searches: Queries over big time ranges or huge data sets can be slow.
Dashboard and UI limitations: Some users find customization less flexible than competitors, and the interface can feel cluttered as features expand.
Alert tuning: Setting up alerts that are accurate without being noisy takes effort.
Support and documentation: Experiences vary, and some users say complex issues take a while to resolve.
Feature sprawl: Because the platform covers logs, metrics, traces, and SIEM, some capabilities feel less mature than specialized tools.

What problems is the product solving and how is that benefiting you?

Scattered logs: Applications, servers, and cloud services each produce their own logs. Sumo Logic centralizes them in one searchable place.
Slow troubleshooting: Instead of logging into individual systems, teams can search across everything at once to find the root cause of an outage or error.
Security visibility: It helps detect threats and suspicious activity by correlating events across systems, and it supports compliance reporting.
Monitoring blind spots: Dashboards and alerts surface performance problems before users notice them.
Scaling overhead: Being cloud-hosted, teams don't have to run or scale their own logging infrastructure.

What do you like best about the product?

It can transform complex operational data into actionable insights, helping customers proactively identify issues and resolve them more quickly by capturing the correct required logs.

What do you dislike about the product?

Too many logs to read if not specified.

What problems is the product solving and how is that benefiting you?

It helps in solving the challenge of managing and making sense of the massive amounts of data generated by modern cloud applications, infrastructure, and security systems.

What do you like best about the product?

I really appreciate how fast the search is across a lot of data, and the saved searches are a huge benefit because I often reuse the same queries instead of rebuilding them. Writing and tuning detection rules is pretty straightforward, which makes things easier for us. The support from Sumo Logic has been great since we started using them. The dashboards are very helpful as I can build a specific view around a detection or system and share it with other teams, saving time on having to teach the query language. This setup facilitates better collaboration, as security and operations can look at the same information during an investigation and get to a resolution faster. The initial setup of Sumo Logic was pretty easy, especially with the help we got from their team. It's been overall a great tool, and I consider Sumo Logic our main source of truth.

What do you dislike about the product?

My one gripe is cost. The pricing is tied to how much you ingest so the bill scales with log volume. We've had to make some tough calls about what to send based on budget based on what we actually want visibility into.

What problems is the product solving and how is that benefiting you?

Sumo Logic allows us to investigate security alerts from one spot, making it easy to write detection rules and search across logs quickly. It reduces the need for switching between tools and facilitates sharing views with other teams, enhancing investigation speed.

What do you like best about the product?

What I like most about Sumo Logic is the centralized visibility it provides into both security and operational data, which makes monitoring and investigations more efficient. I also appreciate its strong analytics and real-time alerting features, since they help teams spot issues sooner and respond quickly when something comes up.

What do you dislike about the product?

Sumo Logic can feel somewhat complex to configure and navigate, especially for new users. Some of the more advanced features also take extra time and expertise to use effectively. On top of that, the pricing model can be hard to predict as data volume grows, and the AI capabilities could offer more actionable insights without requiring so much manual tuning.

What problems is the product solving and how is that benefiting you?

Sumo Logic centralizes security and operational data from multiple sources, making it easier to monitor activity, investigate incidents, and identify potential threats. Its integrations, real-time alerting, and analytics help reduce manual effort, improve response times, and provide better visibility across the environment.