Try our new research platform with insights from 80,000+ expert users

Microsoft Sentinel vs Sumo Logic Security comparison

Microsoft and Sumo Logic are both solutions in the Security Information and Event Management (SIEM) category. Microsoft is ranked #3 with an average rating of 8.3, while Sumo Logic is ranked #25 with an average rating of 7.8. Microsoft holds a 7.2% mindshare in SIEM, compared to Sumo Logic’s 1.0% mindshare. Additionally, 93% of Microsoft users are willing to recommend the solution, compared to 91% of Sumo Logic users who would recommend it.
Microsoft Sentinel
Read 92 Microsoft Sentinel reviews
  • 13,318 Views
  • 8,289 Comparison Views
93% willing to recommend
Sumo Logic Security
Read 20 Sumo Logic Security reviews
  • 1,253 Views
  • 893 Comparison Views
91% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Sep 18, 2024

Sumo Logic Security and Microsoft Sentinel are competitors in the security data and analytics sector. Sumo Logic Security excels in deployment ease and customer support, while Microsoft Sentinel stands out due to its advanced features and AI capabilities.

Features: Sumo Logic Security offers real-time analytics, scalability, and integration capabilities. Its search and alert features are user-friendly. Microsoft Sentinel provides comprehensive threat detection, AI-driven insights, and seamless integration with other Microsoft products. The primary distinction lies in Sentinel's advanced AI versus Sumo Logic's real-time analytics.

Room for Improvement: Sumo Logic Security needs enhanced multi-cloud compatibility and more detailed documentation. Microsoft Sentinel could improve in alert management and customization options. Both products have distinct areas for enhancement, with varying focus points.

Ease of Deployment and Customer Service: Sumo Logic Security is known for its easy deployment process and responsive customer service. Microsoft Sentinel, despite its complexity in deployment due to robust features, benefits from excellent integration with other Microsoft services, aiding existing Microsoft users. Sumo Logic Security scores highly for deployment and customer support, while Microsoft Sentinel's integration within the Microsoft ecosystem helps balance its complexity.

Pricing and ROI: Sumo Logic Security is valued for competitive pricing and clear ROI, particularly for SMBs. Microsoft Sentinel, potentially more expensive, offers significant ROI through its advanced features and integration capabilities. Users see the higher initial Sentinel cost as justified by long-term benefits and superior features.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Microsoft Sentinel vs. Sumo Logic Security Report (Updated: April 2025).
Buyer's Guide
Microsoft Sentinel vs. Sumo Logic Security
April 2025
Download the complete report
Helped 849,686 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.2
Microsoft Sentinel ROI is mixed; challenges exist, but benefits include automation savings, enhanced security, and reduced staffing needs.
Sentiment score
7.6
Sumo Logic Security improves troubleshooting and operational efficiency, with users finding ROI generally justifies its continued use.
If a customer is already using Microsoft’s ecosystem, the ROI can be positive due to seamless integration.
Microsoft Azure was not fitting for short-term cost savings but promised a better ROI over three to five years for medium to large companies.
For more quotes and insights, download the Microsoft Sentinel report
No quotes available
For more quotes and insights, download the Sumo Logic Security report
 

Customer Service

Sentiment score
6.7
Microsoft Sentinel's support is praised for quick response, with premium tiers offering expert help and strong community resources.
Sentiment score
7.4
Sumo Logic Security's support is responsive and helpful but can occasionally delay up to 48 hours; no phone support mentioned.
Their solutions' integration simplifies resolving issues compared to those caused by third-party products.
When my team needs to escalate issues to Microsoft, especially for Microsoft Sentinel, the response is fast through their French entity.
Once familiar with the system, it becomes very straightforward.
For more quotes and insights, download the Microsoft Sentinel report
They have a response time of forty-eight hours, which is not instant support.
For more quotes and insights, download the Sumo Logic Security report
MK
Ivan Angelov - PeerSpot reviewer
DF
Vinay Patel D N - PeerSpot reviewer
 

Scalability Issues

Sentiment score
8.0
Microsoft Sentinel's cloud scalability enables effortless resource management and meets large-scale needs, making it ideal for extensive monitoring.
Sentiment score
8.1
Sumo Logic Security offers scalable, cloud-based solutions praised for integration, performance, and flexibility across diverse infrastructures, with positive user feedback.
Office 365 and Exchange are running on it, covering about 35,000 users efficiently.
Being a SaaS solution, the scalability of Microsoft Sentinel is robust.
As our organization uses Microsoft Azure and Defender, everything grows together, and we can integrate various features seamlessly.
For more quotes and insights, download the Microsoft Sentinel report
The tool has high scalability because everything is based in the cloud.
For more quotes and insights, download the Sumo Logic Security report
MK
MI
JM
WilsonAitan - PeerSpot reviewer
 

Stability Issues

Sentiment score
7.8
Microsoft Sentinel is stable and reliable with 99.9%+ uptime; issues typically arise from external factors or misconfigurations.
Sentiment score
8.1
Sumo Logic Security is highly praised for stability, reliability, and maintaining performance under load, with minimal latency issues.
In the past two years, our team hasn't encountered any issues with the stability of Microsoft Sentinel from an operations perspective.
So far, we have not experienced any issues, and it has been stable from the beginning.
I need to be aware of deprecated connectors as they may disconnect, but the data continues to be sent with a need for quick adaptation.
For more quotes and insights, download the Microsoft Sentinel report
If there are many records, the system may stop or the UI may become unresponsive.
For more quotes and insights, download the Sumo Logic Security report
Ivan Angelov - PeerSpot reviewer
MK
MI
Vinay Patel D N - PeerSpot reviewer
 

Room For Improvement

Users recommend improvements to multi-tenancy, log ingestion, interface intuitiveness, and integration, with concerns over pricing and AI enhancement.
Sumo Logic Security faces challenges in performance, automation, support, API integration, and high costs, needing improvements across multiple areas.
We have some tools, such as our off-site Meraki firewalls, that have not fully integrated with Sentinel.
Continuing to increase the number of third-party data connectors available is important.
Currently, we are happy to have a way in the middle with not so much cost, but it would be nice to have the ability to enhance the automation of workflows based on learned incidents.
For more quotes and insights, download the Microsoft Sentinel report
The correlation rules and log mapping are not as mature compared to other SIM tools like Splunk.
This is crucial to sell to the government and financial sectors as they require data retention within each country.
For more quotes and insights, download the Sumo Logic Security report
JM
DF
MK
Vinay Patel D N - PeerSpot reviewerWilsonAitan - PeerSpot reviewer
 

Setup Cost

Microsoft Sentinel offers scalable, cost-effective pricing with discounts, especially beneficial for E5 users and high-volume data ingestion.
Sumo Logic Security users find AWS Marketplace simplifies billing and offers a competitive, cost-effective pricing structure despite scalability concerns.
The ingestion costs for the data analytics is usually the highest cost.
Setting up the right cost model for customers is intricate, requiring careful consideration of various components and licensing tiers.
Microsoft Sentinel offers more capabilities than Bastion, with a more intuitive experience.
For more quotes and insights, download the Microsoft Sentinel report
This makes it more cost-effective because other solutions often include a third element in their pricing.
For more quotes and insights, download the Sumo Logic Security report
DF
MI
Ivan Angelov - PeerSpot reviewerWilsonAitan - PeerSpot reviewer
 

Valuable Features

Microsoft Sentinel offers seamless integration, AI-driven threat detection, automated responses, and scalability for efficient, comprehensive security management.
Sumo Logic Security offers robust threat intelligence, real-time observability, and seamless integrations, making it essential for SecOps teams.
The overall visibility that Microsoft Sentinel provides into the environments across multiple clouds and platforms on the ground is beneficial.
The ability of Microsoft Sentinel to correlate data from multiple sources enhances threat detection capabilities.
Custom workbooks are valuable. It is one of the crucial points in dealing with potential security threats in an automated way without requiring too much manpower.
For more quotes and insights, download the Microsoft Sentinel report
If we cannot find the data in other tools, like email security or NDR, we can fetch those logs in the Log Analytics platform of Sumo Logic.
Sumo Logic Security offers a single dashboard and customization, which are the most valuable features.
For more quotes and insights, download the Sumo Logic Security report
DF
MI
MK
Vinay Patel D N - PeerSpot reviewerWilsonAitan - PeerSpot reviewer
 

Categories and Ranking

Microsoft Sentinel
Ranking in Security Information and Event Management (SIEM)
3rd
Ranking in Security Orchestration Automation and Response (SOAR)
1st
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
92
Ranking in other categories
Microsoft Security Suite (6th), AI-Powered Cybersecurity Platforms (5th)
Sumo Logic Security
Ranking in Security Information and Event Management (SIEM)
25th
Ranking in Security Orchestration Automation and Response (SOAR)
15th
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
20
Ranking in other categories
Log Management (24th)
 

Mindshare comparison

As of May 2025, in the Security Information and Event Management (SIEM) category, the mindshare of Microsoft Sentinel is 7.2%, down from 9.0% compared to the previous year. The mindshare of Sumo Logic Security is 1.0%, up from 0.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM)
 

Featured Reviews

KrishnanKartik - PeerSpot reviewer
Every rule enriched at triggering stage, easing the job of SOC analyst
It's a Big Data security analytics platform. Among the unique features is the fact that it has built-in UEBA and analytical capabilities. It allows you to use the out-of-the-box machine learning and AI capabilities, but it also allows you to bring your own AI/ML, by bringing in your own IPs and allowing the platform to accept them and run that on top of it. In addition, the SOAR component is a pay-per-use model. Compared to any other product, where customization is not available, you can fine-tune the SOAR and you'll be charged only when your playbooks are triggered. That is the beauty of the solution because the SOAR is the costliest component in the market today. Other vendors charge heavily for the SOAR, but with Sentinel it is upside-down: the SOAR is the lowest-hanging fruit. It's the least costly and it delivers more value to the customer. The SOAR engine also uniquely helps us to automate most of the incidents with automated enrichment and that cuts out the L1 analyst work. And combining M365 with Sentinel, if you want to call it integration, takes just a few clicks: "next, next finish." If it is all M365-native, it is a maximum of three or four steps and you'll be able to ingest all the logs into Sentinel. That is true even with AWS or GCP because most of the connectors are already available out-of-the-box. You just click, put in your subscription details, include your IAM, and you are finished. Within five to six steps, you can integrate AWS workloads and the logs can be ingested into Sentinel. When it comes to a third party specifically, such as log sources in a data center or on-premises, we need a log collector so that the logs can be forwarded to the Sentinel platform. And when it comes to servers or something where there is an agent for Windows or Linux, the agent can collect the logs and ship them to the Sentinel platform. I don't see any difficulties in integrating any of the log sources, even to the extent of collecting IoT log sources. Microsoft Defender for Cloud has multiple components such as Defender for Servers, Defender for PaaS, and Defender for databases. For customers in Azure, there are a lot of use cases specific to protecting workloads and PaaS and SaaS in Azure and beyond Azure, if a customer also has on-premises locations. There is EDR for Windows and Linux servers, and it even protects different kinds of containers. With Defender for Cloud, all these sources can be seamlessly integrated and you can then track the security incidents in Microsoft's XDR platform. That means you have one more workspace, under Azure, not Defender for Cloud, where you can see the security incidents. In addition, it can be integrated with Sentinel for EDR deep-dive analytics. It can also protect workloads in AWS. We have customers for whom we are protecting their AWS workloads. Even EKS, Elastic Kubernetes Service, on AWS can be integrated, as can the GKE (Google Kubernetes Engine). And with Defender for Cloud, security alert ingestion is free
Read full review
WilsonAitan - PeerSpot reviewer
Offers a single dashboard with customizable features and a cost-effective pricing structure
Sumo Logic Security offers a single dashboard and customization, which are the most valuable features. Additionally, it has a cost-effective structure because it is based on data storage and the number of scans, rather than uploading data. This cost model impacts the customers positively by offering a more straightforward pricing structure.
Read full review
report
See which vendors are best for you
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
See recommendations
849,686 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Financial Services Firm
11%
Manufacturing Company
8%
Government
8%
Computer Software Company
15%
Financial Services Firm
11%
Government
9%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Is there a common threat intelligence tool that aggregates multiple threat intelligence sources?
Yes, Azure Sentinel is a SIEM on the Cloud. Multiple data sources can be uploaded and analyzed with Azure Sentinel and its Threat Hunting functionality with AI available as templates or customized ...
See all answers
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
See all answers
Which is better - Azure Sentinel or AWS Security Hub?
We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel is auto-scaling - you will not have to worry about performance impact, you will...
See all answers
What do you like most about Sumo Logic Security?
Sumo Logic Security is a good solution for searching the logs and identifying the issues.
See all answers
What is your experience regarding pricing and costs for Sumo Logic Security?
The pricing structure for Sumo Logic Security is based on two elements: data storage and the number of scans. This makes it more cost-effective because other solutions often include a third element...
See all answers
What needs improvement with Sumo Logic Security?
In terms of improvement, feedback indicates there is a need for a local data center in my country. This is crucial to sell to the government and financial sectors as they require data retention wit...
See all answers
 

Comparisons

AWS Security Hub vs Microsoft Sentinel Logo
AWS Security Hub vs Microsoft Sentinel
Compared 21% of the time
IBM Security QRadar vs Microsoft Sentinel Logo
IBM Security QRadar vs Microsoft Sentinel
Compared 8% of the time
Cortex XSIAM vs Microsoft Sentinel Logo
Cortex XSIAM vs Microsoft Sentinel
Compared 8% of the time
Wazuh vs Microsoft Sentinel Logo
Wazuh vs Microsoft Sentinel
Compared 5% of the time
Google Chronicle Suite vs Microsoft Sentinel Logo
Google Chronicle Suite vs Microsoft Sentinel
Compared 5% of the time
More Microsoft Sentinel Competitors
Wazuh vs Sumo Logic Security Logo
Wazuh vs Sumo Logic Security
Compared 14% of the time
Google Chronicle Suite vs Sumo Logic Security Logo
Google Chronicle Suite vs Sumo Logic Security
Compared 12% of the time
Securonix Next-Gen SIEM vs Sumo Logic Security Logo
Securonix Next-Gen SIEM vs Sumo Logic Security
Compared 10% of the time
Rapid7 InsightIDR vs Sumo Logic Security Logo
Rapid7 InsightIDR vs Sumo Logic Security
Compared 8% of the time
Splunk Enterprise Security vs Sumo Logic Security Logo
Splunk Enterprise Security vs Sumo Logic Security
Compared 7% of the time
More Sumo Logic Security Competitors
 

Product Reports

Buyer's Guide
Microsoft Sentinel
April 2025
Microsoft Sentinel reportDownload Microsoft Sentinel product report
Buyer's Guide
Sumo Logic Security
April 2025
Sumo Logic Security reportDownload Sumo Logic Security product report
 

Also Known As

Azure Sentinel
No data available
 

Overview

Microsoft Sentinel is a scalable, cloud-native, security information event management (SIEM) and security orchestration automated response (SOAR) solution that lets you see and stop threats before they cause harm. Microsoft Sentinel delivers intelligent security analytics and threat intelligence across the enterprise, providing a single solution for alert detection, threat visibility, proactive hunting, and threat response. Eliminate security infrastructure setup and maintenance, and elastically scale to meet your security needs—while reducing IT costs. With Microsoft Sentinel, you can:

- Collect data at cloud scale—across all users, devices, applications, and infrastructure, both on-premises and in multiple clouds

- Detect previously uncovered threats and minimize false positives using analytics and unparalleled threat intelligence from Microsoft

- Investigate threats with AI and hunt suspicious activities at scale, tapping into decades of cybersecurity work at Microsoft

- Respond to incidents rapidly with built-in orchestration and automation of common tasks

To learn more about our solution, ask questions, and share feedback, join our Microsoft Security, Compliance and Identity Community.

Microsoft

Sumo Logic

Sumo Logic is a cloud-based machine data analytics company focusing on security, operations, and BI use cases. It provides log management and analytics services that leverage machine-generated big data to deliver real-time IT insights.

Sumo Logic is developed as a SaaS solution, it processes and analyzes large quantities of IT infrastructure data, spotting patterns and anomalies that can indicate a potential threat or significant event.

The platform is designed to help IT, security, and business operations teams develop, manage, and secure their applications and cloud infrastructures. It collects, aggregates, and analyzes data from various sources including servers, virtual machines, and network devices, providing visibility into complex systems.

What are the key features of Sumo Logic?

  • Real-time Analytics: Continuous queries and live dashboards that provide insights into application performance, user behavior, and security threats.

  • Advanced Machine Learning: Utilizes machine learning algorithms to identify trends, anomalies, and patterns.

  • Integrated Threat Intelligence: Tools and workflows to enhance security postures by detecting threats and anomalies.

  • Multi-tenant Cloud Service: Allows users to operate in a shared cloud environment securely.

The solution aims to simplify data complexity, streamline operations, and provide actionable insights to businesses across various industries.

Sumo Logic is designed to handle high data volumes from multiple sources without diminishing performance. It is primarily deployed in the cloud with seamless integrations for AWS, Google Cloud, and Microsoft Azure. This flexibility allows users to leverage Sumo Logic’s capabilities regardless of their existing cloud infrastructure.

In summary, Sumo Logic is a comprehensive, AI-driven analytics solution ideal for businesses looking to enhance their IT and security operations through data-driven insights and real-time monitoring. Its flexible deployment options and scalable pricing model make it accessible for various business sizes and sectors.

Sumo Logic
 

Sample Customers

Microsoft Sentinel is trusted by companies of all sizes including ABM, ASOS, Uniper, First West Credit Union, Avanade, and more.
Information Not Available
Buyer's Guide
Microsoft Sentinel vs. Sumo Logic Security
April 2025
Free Report: Microsoft Sentinel vs. Sumo Logic Security
Find out what your peers are saying about Microsoft Sentinel vs. Sumo Logic Security and other solutions. Updated: April 2025.
DOWNLOAD NOW
849,686 professionals have used our research since 2012.
See our Microsoft Sentinel vs. Sumo Logic Security report.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.