Try our new research platform with insights from 80,000+ expert users

Logstash vs Sumo Logic Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Logstash
Ranking in Log Management
24th
Average Rating
9.0
Reviews Sentiment
5.6
Number of Reviews
5
Ranking in other categories
No ranking in other categories
Sumo Logic Security
Ranking in Log Management
39th
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
20
Ranking in other categories
Security Information and Event Management (SIEM) (35th), Security Orchestration Automation and Response (SOAR) (20th)
 

Mindshare comparison

As of October 2025, in the Log Management category, the mindshare of Logstash is 0.7%, up from 0.4% compared to the previous year. The mindshare of Sumo Logic Security is 0.6%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Log Management Market Share Distribution
ProductMarket Share (%)
Logstash0.7%
Sumo Logic Security0.6%
Other98.7%
Log Management
 

Featured Reviews

PRANIL CHANDARKAR - PeerSpot reviewer
Open-source accessibility and ease of implementation empower adaptable log management
As both a customer and an integrator, I think the best features in Logstash are that people prefer it because it is open to all, as it is an open-source version. The functionality of Logstash is quite easy to implement. I can say that the plugin ecosystem of Logstash is great. I have used some plugins for shell script monitoring and for SQL monitoring, and these are all working well with Logstash. The real-time processing capabilities of Logstash are also pretty fine with the tool. When I use the community edition, I have to do many things manually. If I am using enterprise Elastic, then that is taken care of by the Elastic native machine learning.
Vinay Patel D N - PeerSpot reviewer
Effective with good log analytics but needs better rule correlation
The correlation rules and log mapping are not as mature compared to other SIM tools like Splunk. Sometimes logs will not fetch, and there are issues if the log volume exceeds a threshold. Not every tool is integrated with Sumo Logic. The response time for their support could be better, and it is not very user-friendly.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Logstash has numerous plugins for inputs and outputs, allowing it to work well in environments that do not contain other Elastic components."
"The transformation means we ship the logs in the way that we want them to be presented in Kibana, which is the main function we use Logstash for."
"We have three or four Logstash servers for high availability."
"Everything aligns well with improving our organization."
"I can collect logs from various data sources, including hardware."
"The tool has key features like operability. It will alert the admins whenever a device is onboarded."
"The solution is quite stable."
"For many of our services, we use Sumo Logic to track errors and send notifications to our Slack channel, if there are issues. Then, we have our support people monitoring this, and they can react quickly."
"We can integrate threat intelligence solutions into the product."
"We are able to diagnose problems before our customers."
"We have used it many times to find a root cause of a live issue, then fix the problem in the applications."
"We use it to ingest Windows domain controller logs. We use this to monitor if anyone is placed in particular administration groups that potentially shouldn't be. It helps us keep track of people."
"The features I found valuable with the Sumo Logic Security solution are the search option and the ability to customize the search for the information in the logs."
 

Cons

"There can be a UI to implement with Logstash. Currently, I have to work with config files and everything."
"The product needs to improve its compatibility."
"Almost all the research can be very bad. We still have a problem with importing the log system."
"We still have a problem with importing the log system."
"Elastic does not provide proper support for Logstash worldwide, and I rate their technical support as one out of ten."
"An enhancement we could implement is the ability to cluster Logstash to exist in more than one node."
"The dashboard has room for improvement, because sometimes it is a difficult to create a specific dashboard or query. This would be a nice place to correct problems."
"It took a bit of trial and error to get it set up correctly based on everything we had to do. In the end, we had to send everything over HTTP, which was sort of a stop-gap."
"We would like the ability to drill down into a dashboard and get into deeper levels."
"From the network segmentation side, there is some discrepancy in log onboarding. The tool needs to improve direct API integrations, login integration, native login integration, etc."
"We would like to have some type of predefined setup for the logs, making the setup easier by default."
"The initial setup is the most stressful, like learning how to use it."
"If you want to up your subscription through the AWS Marketplace, it can be difficult. You can't just go back to the AWS Marketplace, and say, "I want a bigger one now." You have to contact the sales team, then they do it on the back-end. This could definitely be improved."
"The correlation rules and log mapping are not as mature compared to other SIM tools like Splunk."
 

Pricing and Cost Advice

Information not available
"I don't pay the bill. I've heard the AWS Marketplace pricing is high, but I like the value."
"The only limit to the scalability of the product for us is how much we are willing to pay."
"Purchasing the solution through the AWS Marketplace is very easy."
"Storing logs in Sumo Logic Security is charged GB-wise, which is a little higher than other products."
"The AWS Marketplace pricing is fairly reasonable for what it does. I wouldn't call it expensive, but I wouldn't call it cheap. It is pretty good."
"We chose to go through the AWS Marketplace because it makes it a lot easier when we bill our customers. Rather than having to get multiple different sources of information then correlate a monthly bill for our customers, it is just included in the AWS usage charges."
"If we went to ELK Stack, which is open source, it would have been less costly, but it would have required more development from our side."
"Purchasing Sumo Logic through the AWS Marketplace was a simple step."
report
Use our free recommendation engine to learn which Log Management solutions are best for your needs.
869,760 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
12%
Government
9%
University
7%
Computer Software Company
13%
Manufacturing Company
11%
Financial Services Firm
7%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise3
Large Enterprise12
 

Questions from the Community

What do you like most about Logstash?
I can collect logs from various data sources, including hardware.
What needs improvement with Logstash?
Customization can be automated with Logstash, but it is at the developer's disposal. The developer has to do it, not the tool as such. There is scope for optimization, but that is all outside the t...
What is your primary use case for Logstash?
The purposes for which I am using Logstash largely include log aggregation and application monitoring.
What do you like most about Sumo Logic Security?
Sumo Logic Security is a good solution for searching the logs and identifying the issues.
What is your experience regarding pricing and costs for Sumo Logic Security?
The pricing structure for Sumo Logic Security is based on two elements: data storage and the number of scans. This makes it more cost-effective because other solutions often include a third element...
What needs improvement with Sumo Logic Security?
In terms of improvement, feedback indicates there is a need for a local data center in my country. This is crucial to sell to the government and financial sectors as they require data retention wit...
 

Overview

Find out what your peers are saying about Logstash vs. Sumo Logic Security and other solutions. Updated: September 2025.
869,760 professionals have used our research since 2012.