Sumo Logic Security and OpenText Behavioral Signals both operate in the security and data analysis space. Sumo Logic appears to lead in user satisfaction due to pricing and customer service, whereas OpenText is chosen for its superior features.
Features: Sumo Logic Security offers real-time threat detection, cloud-native infrastructure, and automated log correlation. OpenText Behavioral Signals provides advanced behavioral analytics, AI-driven insights, and cutting-edge data analysis tools.
Room for Improvement: Sumo Logic Security can improve its dedicated customer support, enhance feature integration, and offer more competitive advanced features. OpenText Behavioral Signals could simplify its setup process, reduce higher starting costs, and expand cloud-native offerings.
Ease of Deployment and Customer Service: OpenText Behavioral Signals offers comprehensive deployment options and personalized support. Sumo Logic Security focuses on straightforward setup with automated tools but has less personalized customer service.
Pricing and ROI: Sumo Logic Security provides competitive pricing and favorable ROI due to efficient setup. OpenText Behavioral Signals, while having higher startup costs, justifies them with significant ROI through its advanced features.
We have saved 64 hours of our time overall.
The return on investment I have seen with Sumo Logic Security in the past year and a half is tough to quantify, but I would estimate it has hit the milestones we set internally for return on investment.
In general, they usually provide continuous support post-implementation, being in touch and trying to help, which makes their after-sale process better than Splunk.
Sumo Logic Security has really good customer support.
Direct support includes documentations, tutorials, and training access along with community forums, which helps us resolve many questions independently without reaching out to them.
Sumo Logic Security scales up automatically because it is a cloud-native SIEM, and I do not need to worry about hardware clusters or capacity planning.
The tool has high scalability because everything is based in the cloud.
I did not face any significant issues with Sumo Logic Security, but the pricing may be a concern as they try to upsell and raise the prices very quickly.
The query language is pretty straightforward and easy, and it is very powerful for building different searches and dashboards that will serve for later exploration of the same interests I have.
It operates very well as a cloud-native SaaS platform with high availability, and there is no downtime that I have experienced.
This can lead to alerts that are collections of disjointed signals that sometimes make no sense and lack real context; this simplistic approach makes it hard to find coherent stories during investigations.
I would also appreciate the AWS automation integrations to be more secure because currently, they are using access keys, which involves a user rather than roles, which is the security best practice recommended by AWS.
This is crucial to sell to the government and financial sectors as they require data retention within each country.
This makes it more cost-effective because other solutions often include a third element in their pricing.
From one to ten, where one is cheap and ten is expensive, I would put Sumo Logic Security at a seven.
If you go to the well-known vendors such as Azure Sentinel or other tools like Splunk, you are going to find them costly since they are well-known and they have much more integration compared to Sumo Logic Security.
The features I find most useful in Sumo Logic Security are the ease of implementation and connectors; they have a very easy connection and many connectors to important systems, making it very easy to implement and fast to start running in production.
They are able to save time on fewer alerts because we are able to perform tuning on the logs to be able to only get relevant or security relevant incidents.
My SOC analysts were crushed under Splunk, but Sumo has actually eased the workload and made it tolerable for three people.
| Product | Mindshare (%) |
|---|---|
| Sumo Logic Security | 1.6% |
| OpenText Behavioral Signals | 1.0% |
| Other | 97.4% |
| Company Size | Count |
|---|---|
| Small Business | 7 |
| Midsize Enterprise | 4 |
| Large Enterprise | 16 |
OpenText Behavioral Signals optimizes environment customization and offers ease of rule creation and integration, providing comprehensive dashboard access and efficient data management.
OpenText Behavioral Signals provides efficient processing of logs from multiple devices with its correlation engine, making it well-suited for detailed analysis and effective data compartmentalization. It enhances user understanding through its design, although it requires enhancements in dashboard and command usability to match leading competitors. Users experience challenges with connector creation for new logs. Its integration capabilities with Unix and Microsoft connectors allow capturing and analyzing critical events.
What are the key features of OpenText Behavioral Signals?Organizations in sectors like finance and aviation implement OpenText Behavioral Signals for monitoring logs via ArcSight logger using Syslog. It's employed for analyzing network events, enhancing user behavioral analytics, and ensuring quick responses to threats. This is critical in environments needing reliable alert systems and reduced false positives.
Sumo Logic Security offers efficient event monitoring with customizable alerts, centralized log search, and real-time threat detection. It supports multi-cloud environments and integrates with threat intelligence, reducing workload with AI-driven analytics.
Sumo Logic Security empowers organizations with advanced logging and monitoring solutions, facilitating comprehensive security event management. Its robust log search and comparison features, combined with user-friendly dashboards, enable quick event analysis. The platform's multi-cloud support and real-time threat detection are notable features, seamlessly integrating automated log correlation and AI analytics to optimize user experience. Despite needing enhancements in querying and dashboard functionalities, Sumo Logic Security remains a reliable choice for application log management, IT asset visibility, and incident alerting. Organizations utilize it for threat detection, posture monitoring, and compliance audits, in platforms like AWS, focusing on security insights and performance monitoring.
What are the key features of Sumo Logic Security?Organizations in industries like finance and technology implement Sumo Logic Security to maintain security and compliance, leveraging its advanced monitoring and alerting capabilities. Teams focus on application troubleshooting and forensic analysis, ensuring robust security posture and effective incident response across cloud-based environments.
We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
