

Devo and Sumo Logic Observability compete in the observability platform category. Devo seems to have the upper hand in data ingestion speed and analytics depth, whereas Sumo Logic Observability stands out with flexible dashboard customization.
Features: Devo provides robust data ingestion, fast query speed, and deep analytics. Sumo Logic Observability offers flexible dashboard customization, extensive integration options, and comprehensive feature sets.
Room for Improvement: Devo could improve its alerting mechanisms, enhance mobile support, and improve documentation. Sumo Logic Observability needs better reporting capabilities, easier setup processes, and clearer documentation.
Ease of Deployment and Customer Service: Devo has straightforward deployment with solid customer support. Sumo Logic Observability's deployment receives mixed reviews on setup complexity but has responsive and effective customer service.
Pricing and ROI: Devo offers good value with positive ROI in a shorter timeframe. Sumo Logic Observability is perceived as expensive but worth the investment for its extensive features, though ROI takes longer to realize.
Devo gives value to the end user and is saving compared to other products in the same category.
In terms of return on investment with Devo, I'd say it has been costly due to the need for support and the overtime required for issues experienced at the beginning of the project.
We achieve early identification of security incidents that could potentially breach the customer environment, which would have been costly.
I rate the customer support a nine out of ten because of their timely technical guidance and responsiveness during the deployment and troubleshooting periods.
Both response time and support quality need attention.
Technical support from Devo is helpful.
Devo is a unified SIEM solution designed to handle growing log volumes and enterprise-scale monitoring requirements.
Devo's scalability has its challenges.
Regarding Devo's scalability, its horizontal scalability is quite good with no significant hassle.
It is stable and reliable for our security operations.
It's hard for us to keep pace since our original use case was 250 to 500 megabytes a day, and then it became two terabytes a day.
Integrating custom parsing and mapping for non-standard logs is essential due to compatibility challenges with various technologies.
This is particularly evident when dealing with failed login attempts and determining true versus false positives.
The pricing could be simpler, and while the initial setup cost for a new instance is a bit expensive, the licensing can currently be user-based or driven by log volume, which is better if there is expansion of our user base.
The pricing of the product is reasonable if we compare it with other Gartner leading products like Splunk, LogRhythm, Microsoft Sentinel, Google SecOps.
When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins.
When the analyst uses queries to search, it pulls the data quickly, in a second, which aids us greatly with the investigation.
It utilizes 400 days of hot data, allowing queries to run very fast and yield results quicker than other tools in terms of security and SIEM capability.
| Product | Mindshare (%) |
|---|---|
| Devo | 2.0% |
| Sumo Logic Observability | 2.0% |
| Other | 96.0% |


| Company Size | Count |
|---|---|
| Small Business | 11 |
| Midsize Enterprise | 6 |
| Large Enterprise | 15 |
Devo offers powerful visual analytics, real-time data querying, and log integration capabilities within a cloud-native, multi-tenant architecture, supporting extended data retention ideal for long-term analysis and compliance.
Devo is recognized for its Activeboards, which facilitate visual analytics. High-speed search capabilities and real-time analytics enable efficient data manipulation and querying. Its multi-tenant architecture supports effective data segregation and customization tailored to distinct business needs, enhancing its value for handling complex log integrations. With extended data retention of 400 days and a cloud-native architecture, Devo is a robust platform for long-term analysis and compliance requirements. Though opportunities exist to improve browser stability on large searches, SOAR integrations, and its parser capabilities, Devo remains essential for incident response and security monitoring, offering centralized data storage and analysis.
What are Devo's most important features?Devo is extensively used in industries focused on incident response and digital forensics, centralizing data for security monitoring across hybrid environments. Organizations benefit from its ability to store and analyze aggregated logs, creating alerts and dashboards to enhance visibility for network and endpoint activities in multi-domain settings.
Sumo Logic Observability centralizes team collaboration with a unified platform, offering sophisticated dashboards and real-time alerting capabilities. It provides seamless logging and effective incident resolution, balancing its learning curve with robust analytics power.
Sumo Logic Observability integrates log aggregation, storage management, and analysis, enhancing security with SIEM capabilities and efficient debugging through trace IDs. It supports monitoring with customizable alerts and offers scalable dashboard creation. While providing strong functionality, certain aspects such as cost management and advanced querying speed need improvement, particularly when handling extensive datasets. The platform could benefit from enhanced documentation and refined data handling processes to streamline user experience. Smaller teams may face challenges in scalability without substantial resources.
What are some standout features of Sumo Logic Observability?In industries like technology and finance, Sumo Logic Observability is implemented for its powerful log aggregation and analysis capabilities, aiding in debugging and security monitoring. Large organizations use it for dashboard creation and quick data analysis, crucial for handling extensive data volumes efficiently while integrating with existing security systems.
We monitor all AIOps reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.