Logs for Security (AWS Built-In)
Sumo Logic Inc.External reviews
380 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Living in SumoLogic
What do you like best about the product?
My team handles internal support for our employees and we're constantly shifting through logs to determine what our employees and online customers are doing within our application. It's fun playing detective!
What do you dislike about the product?
There's definitely a learning curve for finding the right information and making sure it's ported correctly.
What problems is the product solving and how is that benefiting you?
We've weeded out so many workflow issues and discovered bugs in my short time at TRR.
Recommendations to others considering the product:
It's a fantastic tool for any technical/dev ops, product, or CS team to determine at a granular level how users are operating on your site but you can also zoom out to see larger trends. Useful on so many levels.
Flexible Log Analytics Power Tool
What do you like best about the product?
Time to market:
- Because Sumologic is a SAAS product, I don't need to run an ELK stack or manage any logging / storage infrastructure.
- Because Sumologic is a supported product, I have full access to a team of engineers who wrote the software and to customer success engineers to help leverage the all the features and debug mistakes
- Because Sumologic stores the raw logs, I can always refine and clean up the data in ad-hoc queries over historical data
- Because of the flexible query language, I can iterate on a data pipeline in minutes instead of hours or days (I'm looking at you DataFlow)
Taken as a whole, these features make it possible to quickly build out and iterate on complex log data.
Because Sumologic holds the raw logs (not just metrics), its always possible to clean the data in a way that would not be possible using only
- Because Sumologic is a SAAS product, I don't need to run an ELK stack or manage any logging / storage infrastructure.
- Because Sumologic is a supported product, I have full access to a team of engineers who wrote the software and to customer success engineers to help leverage the all the features and debug mistakes
- Because Sumologic stores the raw logs, I can always refine and clean up the data in ad-hoc queries over historical data
- Because of the flexible query language, I can iterate on a data pipeline in minutes instead of hours or days (I'm looking at you DataFlow)
Taken as a whole, these features make it possible to quickly build out and iterate on complex log data.
Because Sumologic holds the raw logs (not just metrics), its always possible to clean the data in a way that would not be possible using only
What do you dislike about the product?
- Enriching the data is somewhat hard
- Under load the UI is not as responsive as I would like
- Exporting the enriched data is somewhat hard
- For my use case, its very difficult to make reusable portions of queries that are shared by many searches / dashboard panels
- The tradeoff with log analysis tools like Sumo and others versus metric-based data is that complex queries take more time. This isn't a Sumologic problem, its just the downside of the flexibility that comes with log in general
- For large scale projects , care must be taken to stay within the various limits -- though compared to other tools like OpenTSDB Sumologic is much less limited
- Under load the UI is not as responsive as I would like
- Exporting the enriched data is somewhat hard
- For my use case, its very difficult to make reusable portions of queries that are shared by many searches / dashboard panels
- The tradeoff with log analysis tools like Sumo and others versus metric-based data is that complex queries take more time. This isn't a Sumologic problem, its just the downside of the flexibility that comes with log in general
- For large scale projects , care must be taken to stay within the various limits -- though compared to other tools like OpenTSDB Sumologic is much less limited
What problems is the product solving and how is that benefiting you?
Overall business objective: Detection and understand root causes of problems with network traffic for online video.
Benefits:
- Faster time to market
- Reduced maintenance
- Customer support
- Domain expertise
- Fast Iteration
Benefits:
- Faster time to market
- Reduced maintenance
- Customer support
- Domain expertise
- Fast Iteration
Recommendations to others considering the product:
Think about total cost of ownership before choosing either an open source product (like OpenTSDB, ELK, Graylog, or InfluxDB). In particular, estimate:
* Capacity Planning -- what load will monitoring analytics solution need to handle at peak? Do you have staff with experience scaling out that platform to that scale? Are the scaling characteristics of this product at that scale well understood?
* Data ingest costs in your preferred cloud / on-premise hosting solution and how much infrastructure you'll need to ingest that data.
* Support Contracts -- How much will a support contract cost to help you get unstuck quickly?
* Time to build out an MVP -- will you need to manage lots of infrastructure yourself? Can you leverage an in-house operational team that will immediately prioritize your project above other work? (In many cases, in house teams are already over-committed in my experience)
* Familiarity with the Data -- if you already understand the data well (from working with it in a different product for example), you may not need the flexibility of Sumologic
* Cycle Time - How long will it take to make a single small change to your MVP? Minutes or days? Whats your dead line to having an acceptable version in production?
In short, if you are cash rich and time poor but need to iterate and scale rapidly, look at a SAAS offering like Splunk, Sumologic, or Elastic. In many cases, Sumologic will actually win on price over the offerings and for me, I've seen Sumologic perform well at high scale.
If you are time rich and cash poor or already understand your dataset / problem domain well AND you don't expect to scale out your system significant in the next 2 to 5 years, you might be able to save money by oeprating an open source product in house. However, you will almost certain pay with your development and maintenance time.
* Capacity Planning -- what load will monitoring analytics solution need to handle at peak? Do you have staff with experience scaling out that platform to that scale? Are the scaling characteristics of this product at that scale well understood?
* Data ingest costs in your preferred cloud / on-premise hosting solution and how much infrastructure you'll need to ingest that data.
* Support Contracts -- How much will a support contract cost to help you get unstuck quickly?
* Time to build out an MVP -- will you need to manage lots of infrastructure yourself? Can you leverage an in-house operational team that will immediately prioritize your project above other work? (In many cases, in house teams are already over-committed in my experience)
* Familiarity with the Data -- if you already understand the data well (from working with it in a different product for example), you may not need the flexibility of Sumologic
* Cycle Time - How long will it take to make a single small change to your MVP? Minutes or days? Whats your dead line to having an acceptable version in production?
In short, if you are cash rich and time poor but need to iterate and scale rapidly, look at a SAAS offering like Splunk, Sumologic, or Elastic. In many cases, Sumologic will actually win on price over the offerings and for me, I've seen Sumologic perform well at high scale.
If you are time rich and cash poor or already understand your dataset / problem domain well AND you don't expect to scale out your system significant in the next 2 to 5 years, you might be able to save money by oeprating an open source product in house. However, you will almost certain pay with your development and maintenance time.
Sumo Logic user
What do you like best about the product?
Sumo Logic is a wonderful that allows us to customize searches and alerts. it has support for a vast number services to ingest logs from
What do you dislike about the product?
There is no MacOS application similar to the Windows and Linux one
What problems is the product solving and how is that benefiting you?
Siem and centralized logging tool. We have been able to aggregate logs from multiple sources and set up alerting based on the sources of the logs
Troubleshotting logs
What do you like best about the product?
It is easy to troubleshoot logs and categorize them as peer different codebase and categories
What do you dislike about the product?
Still need to have an expertise on parsing complicated json using sumo
What problems is the product solving and how is that benefiting you?
troubleshooting producting errors and staging environment errors
Very fast and easy to use
What do you like best about the product?
I like the way on how we can create queries using different configurations that provides an option to create very helpful dashboards
What do you dislike about the product?
I have to learn how to create the different queries but after it is very useful
What problems is the product solving and how is that benefiting you?
We have some many microservices with different containers. With sumologic we can create different filter that help us on identifying issue in production
Necessary tool
What do you like best about the product?
Like a developer this is a tool that really helps. Its very necessary to know how our applications are behaving. We always heard about put logs in our code, but Sumologic make search this logs in the easiest way.
What do you dislike about the product?
Sometimes you want to know what are after and before your search
What problems is the product solving and how is that benefiting you?
I use sumo to look for different environment software problems looking in the logs.
Recommendations to others considering the product:
Easy use, excellent for search logs
Super developer friendly
What do you like best about the product?
Very developer friendly
Easy to adopt
changes the way you think about logs
Scale very well
Easy to adopt
changes the way you think about logs
Scale very well
What do you dislike about the product?
hard to share dashboards, queries to an organization level
What problems is the product solving and how is that benefiting you?
production incidents troubleshooting
alerting on production incidents
support cases
alerting on production incidents
support cases
The SUM of all fears, solved!
What do you like best about the product?
Whatever your question is, it's about learning how to write it in a SUMO query, but it can be answered!
What do you dislike about the product?
Performance is not great with longer timespans.
What problems is the product solving and how is that benefiting you?
Production monitoring, issues analysis.
Given how SUMO works it allows us to learn things we would've never realized otherwise.
Given how SUMO works it allows us to learn things we would've never realized otherwise.
the best so far
What do you like best about the product?
Search query is very powerful.
Scheduled search and alert help us to monitor our system.
Dashboard is another awesome feature.
Scheduled search and alert help us to monitor our system.
Dashboard is another awesome feature.
What do you dislike about the product?
sometimes the performance is slow, "log reduce" is powerful but it can be improved.
What problems is the product solving and how is that benefiting you?
Monitoring errors and logs.
Scheduled search and Alert
Scheduled search and Alert
sumo is great!
What do you like best about the product?
endless customization of queries... the ability to pull in logs from so many sources and piece them all together in a single, correlated thread without having to go to multiple places and manually piece logs together. so much time and effort saved!
What do you dislike about the product?
tooltips aren't always very clear, insofar as explaining syntax goes
What problems is the product solving and how is that benefiting you?
customized monitoring for systems built in house
showing 91 - 100