No more typing reviews! Try our Samantha, our new voice AI agent.

Devo vs Sumo Logic Observability comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.5
Devo enhances data analysis and threat detection cost-effectively, offering scalability, customization, and efficiency in resource allocation.
Sentiment score
7.0
Sumo Logic Observability improved operational efficiency, reduced downtime, and provided better issue resolution, visibility, stability, and proactive IT management.
 

Customer Service

Sentiment score
6.7
Devo's customer service is praised for responsiveness and effectiveness, but some seek better documentation and clarity in ticket handling.
Sentiment score
7.8
Sumo Logic Observability's customer service is highly rated, with quick responses and helpful support, particularly for advanced and OpenTelemetry issues.
I rate the customer support a nine out of ten because of their timely technical guidance and responsiveness during the deployment and troubleshooting periods.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
Both response time and support quality need attention.
Team Lead SOC at a tech services company with 51-200 employees
 

Scalability Issues

Sentiment score
7.0
Devo's cloud-based architecture ensures impressive scalability, efficiently managing large data volumes and integrating users across regions without limitations.
Sentiment score
7.3
Sumo Logic Observability scales efficiently for diverse users, handling peak records with ease, supported by Fluent Bit and OpenTelemetry.
Devo is a unified SIEM solution designed to handle growing log volumes and enterprise-scale monitoring requirements.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
 

Stability Issues

Sentiment score
7.3
Devo is praised for its stability, reliable uptime, proactive support, and effective management of large deployments despite minor issues.
Sentiment score
8.8
Sumo Logic Observability is highly reliable, with users experiencing no issues and rating its reliability a perfect ten for enterprises.
It is stable and reliable for our security operations.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
 

Room For Improvement

Devo's Activeboards need better customization, integration, UI, and AI capabilities, while cost and usability require attention.
The system requires efficiency improvements in data usage, cost management, enrichment, search interface, query speed, and pre-built dashboards.
The only option for us to run the playbook is to schedule the job for it. However, if I want to manually run the playbook, there is no option for doing so.
Team Lead SOC at a tech services company with 51-200 employees
UI improvements, a simplified dashboard, or an easier reporting workflow could further improve analyst productivity.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
This is particularly evident when dealing with failed login attempts and determining true versus false positives.
Strategic Account Executive at a computer software company with 51-200 employees
 

Setup Cost

Devo offers transparent pricing per gigabyte, with potential metadata charges, including 400-day storage and additional feature benefits.
<p>Sumo Logic Observability provides flexible, competitive pricing for enterprises, but additional costs may apply for advanced features and high data volumes.</p>
The pricing of the product is reasonable if we compare it with other Gartner leading products like Splunk, LogRhythm, Microsoft Sentinel, Google SecOps.
Team Lead SOC at a tech services company with 51-200 employees
 

Valuable Features

Devo impresses with real-time analytics, intuitive UI, customization, advanced alerting, cloud-native architecture, and 400 days of data retention.
Sumo Logic Observability offers real-time alerting, apps, team collaboration, easy integration, and a flexible query language, boosting incident resolution.
When the analyst uses queries to search, it pulls the data quickly, in a second, which aids us greatly with the investigation.
Cyber Security Engineer Ii (Vulnerability & Threat Management) at FICO
When they see a spike in a line chart for a failed login, which could be a true or false attempt, they can click that spike, and a table widget on the same active board instantly populates with raw logs of data for those specific failed logins.
Strategic Account Executive at a computer software company with 51-200 employees
Devo has 400 days of hot storage and you can draw your attack chain from more than a year if you are hunting for threats.
Team Lead SOC at a tech services company with 51-200 employees
 

Categories and Ranking

Devo
Ranking in AIOps
13th
Average Rating
8.4
Reviews Sentiment
6.5
Number of Reviews
26
Ranking in other categories
Log Management (18th), Security Information and Event Management (SIEM) (18th), IT Operations Analytics (7th)
Sumo Logic Observability
Ranking in AIOps
30th
Average Rating
7.8
Reviews Sentiment
7.2
Number of Reviews
6
Ranking in other categories
Application Performance Monitoring (APM) and Observability (69th), Cloud Monitoring Software (46th)
 

Mindshare comparison

As of August 2026, in the AIOps category, the mindshare of Devo is 2.0%, up from 0.8% compared to the previous year. The mindshare of Sumo Logic Observability is 2.0%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
AIOps Mindshare Distribution
ProductMindshare (%)
Devo2.0%
Sumo Logic Observability2.0%
Other96.0%
AIOps
 

Featured Reviews

Usama Khan - PeerSpot reviewer
Team Lead SOC at a tech services company with 51-200 employees
Advanced threat hunting has improved SOC visibility and now supports faster incident response
Devo can improve in how its connectors enhance integration with third-party tools. Devo's architecture works by having you deploy a relay server in the data center of the client side and Devo SIEM is basically on the AWS cloud. There are specific ports which are enabled on the relay server, which are 514 and 13000, 13151, 152. However, when we talk about databases and custom integrations, there are not default ports in the relay server. No default ports are defined. For JDBC drivers, the port number is 1433, but it is not in the relay server. You have to add it manually. For Oracle RDBMS, the port is 1521, and it is also not there by default. I would appreciate more third-party integrations including Fortinet and others. Machine learning models can also be improved. Playbooks in the SOAR can also be improved. Regarding playbooks for automation, we utilize playbooks for automation in SOAR for automated IOC blocking on a firewall, on a web application firewall, on DNS security, etc. The only option for us to run the playbook is to schedule the job for it. However, if I want to manually run the playbook, there is no option for doing so. This needs improvement.
Shamshir Nangla - PeerSpot reviewer
Site Reliability Engineer at LHV Bank
Getting up and running is easy, even for a newbie but management of searches definitely needs improvement
Operational effectiveness with regards to when there's an issue, when there's a reactive issue, people are able to, or as well as proactively, actually, because we use their PagerDuty integrations. We use queries in Sumo Logic to trigger alerts based on logging. That allows us to proactively identify issues as they're happening. With those same alerts, obviously, with that platform, you can use it to reactively start looking at troubleshooting issues as they're happening right then and there or incidents. So it's been very, very good for alerting and for troubleshooting issues. For predicting issues before they happen, it is not very good. They have a feature called anomaly detection, but I think it's quite premature compared to other stuff out there. So it's good for alerts and for troubleshooting operational effectiveness. When your operations are down or segregated, it's perfect because it will help you diagnose the issues.
report
Use our free recommendation engine to learn which AIOps solutions are best for your needs.
908,834 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Construction Company
10%
Outsourcing Company
9%
Manufacturing Company
9%
Financial Services Firm
15%
Construction Company
14%
Manufacturing Company
12%
Outsourcing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise5
Large Enterprise12
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Devo?
The pricing of the product is reasonable if we compare it with other Gartner leading products like Splunk, LogRhythm, Microsoft Sentinel, Google SecOps. Its licensing model is basically on per-day ...
What needs improvement with Devo?
Devo can improve in how its connectors enhance integration with third-party tools. Devo's architecture works by having you deploy a relay server in the data center of the client side and Devo SIEM ...
What is your primary use case for Devo?
I am using Devo myself. Basically, I work at an MSSP, and we provide services to the organization for Security Operation Centers. In our Security Operation Center, we provide the service of SIEM vi...
Ask a question
Earn 20 points
 

Comparisons

 

Overview

 

Sample Customers

United States Air Force, Rubrik, SentinelOne, Critical Start, NHL, Panda Security, Telefonica, CaixaBank, OpenText, IGT, OneMain Financial, SurveyMonkey, FanDuel, H&R Block, Ulta Beauty, Manulife, Moneylion, Chime Bank, Magna International, American Express Global Business Travel
Information Not Available
Find out what your peers are saying about Devo vs. Sumo Logic Observability and other solutions. Updated: June 2026.
908,834 professionals have used our research since 2012.