Sumo Logic Log Analytics Platform (Pay-As-You-Go with 30-day Free Trial)

What do you like best about the product?

What I like most about Sumo Logic is how much it helps me work faster and more effectively during day-to-day monitoring and incident investigations. Its dashboards give me a quick view of what is happening across production environments, while powerful queries help me drill into logs, identify patterns, validate alerts, and find the root cause of issues. Reusable queries also save me time by making common investigations much more efficient. Most importantly, Sumo Logic helps me quickly understand whether an issue could impact customers and provide clear, actionable information to the right engineering teams. It gives me the visibility and tools I need to move from detection to investigation and escalation with greater confidence.

What do you dislike about the product?

The biggest downside for me is the learning curve for advanced queries and troubleshooting. When working with complex log structures or trying to build a query from scratch, it can take time to get the syntax and filtering exactly right. Some investigations also require multiple queries or deeper knowledge of how the data is indexed and structured. I’d like to see more intuitive query-building assistance, clearer guidance for complex use cases, and easier ways for newer users to discover relevant fields and existing queries. These are relatively minor compared with the visibility and troubleshooting capabilities Sumo Logic provides, but improving them would make the platform faster and easier to use for day-to-day monitoring.

What problems is the product solving and how is that benefiting you?

Sumo Logic helps me quickly monitor and troubleshoot complex cloud environments. For example, when I receive an alert about a production service, I can use a Sumo Logic dashboard to immediately review related logs and signals, then run targeted queries to determine whether the issue is isolated or could affect multiple customers or services. I can look for error patterns, abnormal activity, and related events without manually searching through multiple systems. Reusable queries and dashboards also make recurring investigations much faster and more consistent. This helps me quickly validate alerts, identify the likely root cause, and provide actionable details when escalating an issue to SRE or DevOps. The biggest benefit to me is speed and visibility: Sumo Logic helps me understand what is happening in production sooner, prioritize potential customer impact, and take the right action before an issue becomes a larger incident.

Recommendations to others considering the product:

To enhance user experience, Sumo Logic could introduce more intuitive query-building tools and provide clearer guidance for complex use cases. Offering tutorials or interactive guides for new users would also be beneficial. Additionally, simplifying the process of discovering relevant fields and existing queries could significantly reduce the learning curve, making the platform more accessible and efficient for day-to-day monitoring.

What do you like best about the product?

What I like most about Sumo Logic is how flexible and fast it is when integrating with different tools. Even when there isn’t a pre-built app available, we can usually find a way to ingest logs from virtually any platform.

Mobot has also made working with the platform much easier, especially for building complex queries and handling other day-to-day Sumo Logic tasks. It has significantly reduced the time and effort needed to get things done.

What do you dislike about the product?

One area I would suggest improving is the user interface. The platform is very powerful, but some areas of the interface could be more modern and visually appealing, making the overall user experience more intuitive and engaging.

What problems is the product solving and how is that benefiting you?

Sumo Logic is helping us centralize security visibility across 140+ sources, improve detection and alert triage, and automate repetitive security tasks. This gives our team better visibility, faster investigations, and more efficient day-to-day security operations.

What do you like best about the product?

Easy to use and saves time and gives faster results

What do you dislike about the product?

So far good. I will check eloborately and let know

What problems is the product solving and how is that benefiting you?

time saving

What do you like best about the product?

We run observability for dozens of isolated production environments across AWS, OCI, and Azure with a small DevOps/SRE team, and Sumo Logic is the only reason that scales. Everything lands in one org: Kubernetes clusters on EKS and OKE, cloud audit logs, endpoint and identity telemetry, on-prem Windows infrastructure. Incident triage starts in one search box instead of a "which cluster is that log in?" hunt. The API-first design is the underrated part — we generate Terraform from the live org via the API and manage our entire collector estate as code, and onboarding a new client environment dropped from 5–6 weeks to about one. Scheduled Views keep our SLA reporting cheap, the AI anomaly monitors catch what static thresholds miss, and the Flex pricing model with tiered partitions finally let us match spend to data value.

What do you dislike about the product?

The query language has a real learning curve for engineers coming from other stacks, and the Terraform provider occasionally lags behind newer platform features, which matters if you manage everything as code like we do. Content management (folders, dashboards) via API is clunkier than collector management. None of these are dealbreakers — but they're the rough edges.

What problems is the product solving and how is that benefiting you?

It replaced six separately managed Elasticsearch clusters — all the patching, scaling, securing, and backups went to zero. One platform now covers log analytics, metrics, SLA reporting, and anomaly detection across every client environment we operate, under SOC 2 with PCI-scoped separation. Our client roster has multiplied since 2020; the team running observability has not.

What do you like best about the product?

Mobot does not process or share our log data with any third party. All Sumo Logic AI capabilities operate within industry-recognized security frameworks, which is a huge bonus for a software company like ours and helps us reduce the risk of data breaches.

What do you dislike about the product?

Most of the time, I end up showing up in the Top 100 users because of partition log issues. If, by default, logs could go to T1 or T3 based on the queries, it would help new users avoid wasting data.

What problems is the product solving and how is that benefiting you?

The key benefits include less time spent identifying root causes, faster incident triage, more proactive backlog monitoring, and improved operational efficiency. With SumoMobot AI, we can generate queries, correlate logs and metrics, summarize trends, and speed up investigations. This helps our support teams resolve customer issues more quickly and spend more time on higher-value work.

What do you like best about the product?

Variety of querying capability and integrations

What do you dislike about the product?

Pricing tiers overall costs to continue use

What problems is the product solving and how is that benefiting you?

We use it primarily for investigatory purposes in our infosec team.

What do you like best about the product?

I use Sumo Logic as a centralized logging and monitoring platform, which offers powerful search capabilities and makes it easy to correlate logs from different systems. The platform is intuitive for troubleshooting and provides flexible dashboards and alerting. The log search feature is very powerful, with a flexible and fast search language that makes filtering easy. The centralized log aggregation eliminates the need to switch between tools and speeds up root cause analysis. I also appreciate the custom dashboards that provide real-time visibility and the straightforward, easy initial setup.

What do you dislike about the product?

Pricing can become expensive as our volume grows, and the query language has a learning curve for new users. Improved dashboard customization and more guided onboarding would also enhance the overall experience.

What problems is the product solving and how is that benefiting you?

Sumo Logic centralizes logs for quick issue identification and provides operational visibility. It offers powerful search, easy correlation, and flexible dashboards for real-time monitoring and alerts.

What do you like best about the product?

It’s been a very easy tool to use. I really like how it can identify any problems or threats in real time, and how you can fix them instantly without having to go through previous issues.

What do you dislike about the product?

I think it’s quite expensive for small businesses. Also, I’ve occasionally run into limitations with certain data.

What problems is the product solving and how is that benefiting you?

Sumo Logic has proven to be an extremely secure tool, which is very beneficial for the company. Its integrations allow me to keep everything under control. Furthermore, thanks to its threat detection, I can avoid problems that used to occur frequently. Now my data remains better protected and secure.

What do you like best about the product?

What stood out to me most was the AI activity monitoring. I can now see exactly who's doing what with Claude, user logins, admin actions, API key creation, all in one place. For an AI engineer, that kind of audit trail is genuinely useful, not just for compliance teams but for debugging access issues and tracking how developers are interacting with the platform

What do you dislike about the product?

The detection rules are solid for standard compliance scenarios, but as someone building AI-heavy workflows, I'd love more customization options specific to model-level events, not just admin and workspace changes

What problems is the product solving and how is that benefiting you?

As an AI engineer, one of the biggest challenges I faced was the lack of centralized visibility into our Claude usage across the organization. When we started scaling AI adoption, our security and compliance teams had no way to track who was accessing Claude, what admin actions were being taken, or how API keys were being managed, it was essentially a blind spot in our stack.

What do you like best about the product?

In my experience, it’s a tool that integrates very well with other tools. It also offers a high level of security, which I find especially appealing.

What do you dislike about the product?

Since it’s an internet-dependent tool, it doesn’t work as it should when the connection is very poor.

What problems is the product solving and how is that benefiting you?

It has significantly improved my visibility. I can monitor everything, and it also helps me spot inefficiencies in real time, which in turn boosts operational efficiency.