Try our new research platform with insights from 80,000+ expert users
Sumo Logic Security Logo

Sumo Logic Security Reviews

Vendor: Sumo Logic
4.2 out of 5
Leave a review

What is Sumo Logic Security?

Sumo Logic

Get the Sumo Logic Security Buyer's Guide and find out what your peers are saying about Sumo Logic Security, CrowdStrike Falcon, Wazuh and more!
Sumo Logic Security is the #20 ranked solution in SOAR tools, #35 ranked solution in top Security Information and Event Management (SIEM) solutions, and #39 ranked solution in Log Management Software. PeerSpot users give Sumo Logic Security an average rating of 8.4 out of 10. Sumo Logic Security is most commonly compared to CrowdStrike Falcon: Sumo Logic Security vs CrowdStrike Falcon. Sumo Logic Security is popular among the large enterprise segment, accounting for 50% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 12% of all views.
Buyer's Guide
Sumo Logic Security
October 2025
Get the report
Helped 872,778 peers since 2012

Featured Sumo Logic Security reviews

Read more reviews

Sumo Logic Security mindshare

Product category:
Security Information and Event Manage...
As of October 2025, the mindshare of Sumo Logic Security in the Security Information and Event Management (SIEM) category stands at 1.1%, up from 0.8% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
Sumo Logic Security1.1%
Wazuh10.2%
Splunk Enterprise Security9.2%
Other79.5%
Security Information and Event Management (SIEM)

PeerResearch reports based on Sumo Logic Security reviews

TypeTitleDate
CategorySecurity Information and Event Management (SIEM)Oct 31, 2025Download
ProductReviews, tips, and advice from real usersOct 31, 2025Download
ComparisonSumo Logic Security vs Splunk Enterprise SecurityOct 31, 2025Download
ComparisonSumo Logic Security vs WazuhOct 31, 2025Download
ComparisonSumo Logic Security vs Microsoft SentinelOct 31, 2025Download
Suggested products
TitleRatingMindshareRecommending
CrowdStrike Falcon4.34.1%97%135 interviewsAdd to research
Wazuh3.710.2%80%49 interviewsAdd to research
 
 
Key learnings from peers

Valuable Features

Sumo Logic Security offers valuable features such as out-of-the-box applications and Threat Intelligence integration for monitoring. Users appreciate customizable alerting dashboards, reliable log aggregation, and the ability to troubleshoot production issues. The system's user-friendly query language and responsive interface enhance its efficiency in identifying real-time errors. Users find the ability to create custom alerts and the integration of extensions like CrowdStrike useful. Log Analytics platform and a single customizable dashboard are also highlighted.
  • "The features I find most useful in Sumo Logic Security are the ease of implementation and connectors; they have a very easy connection and many connectors to important systems, making it very easy to implement and fast to start running in production."
  • "Sumo Logic Security offers a single dashboard and customization, which are the most valuable features."
  • "The Log Analytics platform is the most effective. If we cannot find the data in other tools, like email security or NDR, we can fetch those logs in the Log Analytics platform of Sumo Logic."

Room for Improvement

Sumo Logic Security requires a more intuitive user interface and improved dashboard functionality. There are obstacles in setup and API integration, and predefined log patterns need enhancement. Users face challenges with scalability and stability, and manual configuration is complex. Improvement in pricing and competitive features, along with seamless integration and faster support response, is necessary. There is also a need for a local data center for specific requirements.
  • "This can lead to alerts that are collections of disjointed signals that sometimes make no sense and lack real context; this simplistic approach makes it hard to find coherent stories during investigations."
  • "In terms of improvement, feedback indicates there is a need for a local data center in my country. This is crucial to sell to the government and financial sectors as they require data retention within each country."
  • "I don't recommend this product."

ROI

Sumo Logic Security has significantly reduced downtime by enhancing troubleshooting capabilities, allowing quick identification of website issues. It saves time by eliminating the need for extensive credential distribution to access individual system logs. Operational processes have improved, with ROI being closely monitored. The amortized costs of Sumo Logic and New Relic are evaluated within the console, satisfying service teams with favorable ROI, preventing them from considering alternatives. However, some are uncertain about the exact ROI.

Pricing

Enterprise users report that Sumo Logic Security pricing through AWS Marketplace is straightforward and offers competitive value, although some caution it's on the expensive side. The pricing model, focused on data storage and event processing, is praised for balancing cost and functionality compared to competitors like Splunk. While some find it high, the simplicity of consolidation onto AWS bills and the reasonable total cost compared to features offered make it appealing for many enterprises.
  • "Storing logs in Sumo Logic Security is charged GB-wise, which is a little higher than other products."
  • "The product is costly."
  • "The license pricing model is based on the events that are processed through the solution."

Popular Use Cases

Organizations primarily use Sumo Logic Security for logging and monitoring operational and security events. It integrates with AWS services to monitor cloud-based applications and infrastructure, alerting on incidents and performance issues. Companies utilize it for centralized logging, troubleshooting, and application debugging, focusing on alert and performance monitoring. Sumo Logic Security acts as a Cloud SIEM, providing robust security incident and event management capabilities, often integrating with IT and SaaS environments for comprehensive security coverage.

Service and Support

Sumo Logic Security's customer service is praised for being responsive, helpful, and engaging. Many users appreciate the technical team's support, noting their quick response times, often within 24 hours. Some mention having direct interactions through email or via account managers. However, experiences vary, as some point out room for improvement and longer response times, especially when lacking enterprise support. Overall, the customer service team is considered friendly and cooperative with most users expressing satisfaction.

Deployment

Users found Sumo Logic Security's initial setup easy, particularly in AWS environments, aided by comprehensive documentation. New users benefit from sample code for Lambda and similar technologies. Once familiar, it poses little challenge. Some automate setup with AMIs, easing integration. Installation simplicity ranges, with dedicated teams facilitating the process. They note the complexity tied to its extensive management scope, yet agree it's simpler than other options. Setup time varies based on log sources.

Scalability

Users find Sumo Logic Security highly scalable, effectively handling diverse workloads and user counts. Many organizations have increased server use without issues, supporting various applications and large data ingestion. Several users rate scalability between seven to nine out of ten, indicating satisfaction with its capacity. Some see financial investment as the only limit. Despite differing environment sizes, Sumo Logic Security consistently meets scalability needs in different settings, maintaining performance without notable concerns.

Stability

Sumo Logic Security demonstrates significant stability, handling heavy server loads effectively. Reports of issues are rare, mostly involving minor dashboard or log latency. Users consistently describe the system as stable and reliable, with optimized queries enhancing performance. Occasional small delays in log processing are considered typical. Complaints about crashes or bugs are minimal, and the vendor promptly addresses outages. Common stability ratings range from seven to nine out of ten, demonstrating user satisfaction.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Sumo Logic Security Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company SizeCount
Small Business4
Midsize Enterprise3
Large Enterprise10
By reviewers
By visitors reading reviews
Company SizeCount
Small Business106
Midsize Enterprise51
Large Enterprise156
By visitors reading reviews

Top industries

By visitors reading reviews
Computer Software Company
12%
Manufacturing Company
11%
Financial Services Firm
7%
Educational Organization
6%
Comms Service Provider
6%
Retailer
5%
Outsourcing Company
4%
Energy/Utilities Company
4%
University
4%
Construction Company
4%
Insurance Company
4%
Performing Arts
4%
Real Estate/Law Firm
3%
Wholesaler/Distributor
3%
Government
3%
Healthcare Company
3%
Media Company
3%
Consumer Goods Company
2%
Pharma/Biotech Company
2%
Non Profit
2%
Transportation Company
2%
Recruiting/Hr Firm
1%
Logistics Company
1%
Legal Firm
1%
Recreational Facilities/Services Company
1%
Security Firm
1%
Museum Or Institution
1%
Hospitality Company
1%

Compare Sumo Logic Security with alternative products

Go!

Learn more about Sumo Logic Security

Sumo Logic is a cloud-based machine data analytics company focusing on security, operations, and BI use cases. It provides log management and analytics services that leverage machine-generated big data to deliver real-time IT insights.

Sumo Logic is developed as a SaaS solution, it processes and analyzes large quantities of IT infrastructure data, spotting patterns and anomalies that can indicate a potential threat or significant event.

The platform is designed to help IT, security, and business operations teams develop, manage, and secure their applications and cloud infrastructures. It collects, aggregates, and analyzes data from various sources including servers, virtual machines, and network devices, providing visibility into complex systems.

What are the key features of Sumo Logic?

  • Real-time Analytics: Continuous queries and live dashboards that provide insights into application performance, user behavior, and security threats.

  • Advanced Machine Learning: Utilizes machine learning algorithms to identify trends, anomalies, and patterns.

  • Integrated Threat Intelligence: Tools and workflows to enhance security postures by detecting threats and anomalies.

  • Multi-tenant Cloud Service: Allows users to operate in a shared cloud environment securely.

The solution aims to simplify data complexity, streamline operations, and provide actionable insights to businesses across various industries.

Sumo Logic is designed to handle high data volumes from multiple sources without diminishing performance. It is primarily deployed in the cloud with seamless integrations for AWS, Google Cloud, and Microsoft Azure. This flexibility allows users to leverage Sumo Logic’s capabilities regardless of their existing cloud infrastructure.

In summary, Sumo Logic is a comprehensive, AI-driven analytics solution ideal for businesses looking to enhance their IT and security operations through data-driven insights and real-time monitoring. Its flexible deployment options and scalable pricing model make it accessible for various business sizes and sectors.

Related articles

Julia Miller - PeerSpot reviewer
Top SIEM Solutions & Success Stories: Strengthening Cybersecurity in Diverse Industries
Read more

Related questions

  • 144
What Solution for SIEM is Best To Be NIST 800-171 Compliant?
  • 64
When evaluating Security Information and Event Management (SIEM), what aspect do you think is the most important feature to look for?
  • 80
What are the main differences between Nessus and Arcsight?
  • 46
What's The Best Way to Trial SIEM Solutions?
  • 130
Which is the best SIEM solution for a government organization?
  • 656
What is the difference between IT event correlation and aggregation?
  • 51
What Is SIEM Used For?
  • 48
RSA-EMC vs. other SIEM products?
  • 299
What Questions Should I Ask Before Buying SIEM?
  • 90
What are the pros and cons of internal SOC vs SOC-as-a-Service?

Product Categories

Product Categories
Security Information and Event Management (SIEM)
Log Management
Security Orchestration Automation and Response (SOAR)

Popular Comparisons

Popular Comparisons
CrowdStrike Falcon vs Sumo Logic Security Logo
CrowdStrike Falcon vs Sumo Logic Security
Wazuh vs Sumo Logic Security Logo
Wazuh vs Sumo Logic Security
Datadog vs Sumo Logic Security Logo
Datadog vs Sumo Logic Security
Splunk Enterprise Security vs Sumo Logic Security Logo
Splunk Enterprise Security vs Sumo Logic Security
Microsoft Sentinel vs Sumo Logic Security Logo
Microsoft Sentinel vs Sumo Logic Security
IBM Security QRadar vs Sumo Logic Security Logo
IBM Security QRadar vs Sumo Logic Security
Elastic Security vs Sumo Logic Security Logo
Elastic Security vs Sumo Logic Security
Grafana Loki vs Sumo Logic Security Logo
Grafana Loki vs Sumo Logic Security
AWS Security Hub vs Sumo Logic Security Logo
AWS Security Hub vs Sumo Logic Security
Palo Alto Networks Cortex XSOAR vs Sumo Logic Security Logo
Palo Alto Networks Cortex XSOAR vs Sumo Logic Security
Cortex XSIAM vs Sumo Logic Security Logo
Cortex XSIAM vs Sumo Logic Security
Rapid7 InsightIDR vs Sumo Logic Security Logo
Rapid7 InsightIDR vs Sumo Logic Security
LogRhythm SIEM vs Sumo Logic Security Logo
LogRhythm SIEM vs Sumo Logic Security
Amazon CloudWatch vs Sumo Logic Security Logo
Amazon CloudWatch vs Sumo Logic Security
Google Chronicle Suite vs Sumo Logic Security Logo
Google Chronicle Suite vs Sumo Logic Security
See all alternatives
 
Sumo Logic Security Reviews Summary
Author infoRatingReview Summary
SOC Analyst at a computer software company with 1,001-5,000 employees3.0I primarily use Sumo Logic as a Cloud SIEM for alert and insight monitoring, valuing its Log Analytics platform for retrieving logs not available in other tools. However, its correlation rules, log mapping, and support response time need improvement.
Deputy Country Manager at PT Securite Asia Indonesia (ABP Securite)4.0I find Sumo Logic Security valuable for its customizable, cost-effective dashboard focused on data storage and scan volume. However, the lack of a local data center is a barrier for government clients needing in-country data retention.
CSO at Altera3.5I've found Sumo Logic Security easy to implement with great connector support, but its risk-based alerting lacks context. It’s a solid, average tool—good for quick deployment, though not as customizable or in-depth as alternatives like Splunk.
DevOps and Solution Architect at a recruiting/HR firm with 10,001+ employees4.5I use Sumo Logic Security to store and monitor application and VPC flow logs, which makes it easy to search logs and identify issues like application 500 errors. However, the solution is expensive, making pricing a potential area for improvement.
Senior Information Security Analyst at Everbridge3.5We use Sumo Logic as a log aggregator for AWS environments, leveraging its automation and integrations with tools like CrowdStrike. However, we find its query complexity, UI, scalability, and stability lacking, and have faced challenges with collector connections.
Archtect at a financial services firm with 1,001-5,000 employees4.0I use Sumo Logic Security for monitoring due to its valuable rules, ease of use, and straightforward integration. However, API integration needs improvement for seamless log collection. I switched from IBM Security QRadar for its cloud-based advantage on AWS.
Senior Technical Lead4.5I primarily use Sumo Logic Security for security and application monitoring, appreciating its real-time observability and ease of use. While stable and reasonably priced, integration with multiple sources needs improvement. I'm aware of pricier alternatives like QRadar, Splunk, and Grafana.
Programmer at a comms service provider with 10,001+ employees4.0I primarily use Sumo Logic Security for logging and monitoring, with dashboards to track application performance and logins. I value its customizable search feature, though it has a steep learning curve requiring practice for efficient use.