RSA enVision vs Sumo Logic Security comparison

RSA and Sumo Logic are both solutions in the Security Information and Event Management (SIEM) category. RSA is ranked #31 with an average rating of 9.0, while Sumo Logic is ranked #18 with an average rating of 7.7. RSA holds a 0.6% mindshare in SIEM, compared to Sumo Logic’s 1.7% mindshare. Additionally, 83% of RSA users are willing to recommend the solution, compared to 92% of Sumo Logic users who would recommend it.

RSA enVision

Read 6 RSA enVision reviews

1,066 Views
1,045 Comparison Views

83% willing to recommend

Sumo Logic Security

Read 25 Sumo Logic Security reviews

3,422 Views
2,464 Comparison Views

92% willing to recommend

RSA enVision

Sumo Logic Security

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

Sumo Logic Security and RSA enVision are both comprehensive security information and event management (SIEM) solutions. User reviews favor Sumo Logic Security overall due to aspects such as pricing and customer service.

Features: Sumo Logic Security stands out for its cloud-native architecture, real-time data analytics, and scalable platform, which aid in quick threat detection and efficient data processing. RSA enVision is appreciated for its robust reporting capabilities, compliance tracking, and suitability for enterprise needs. Sumo Logic's real-time analytics and scalability seem to give it an edge.

Room for Improvement: Users suggest Sumo Logic Security could enhance its threat intelligence functionalities, simplify integration with other security tools, and refine its user interface. RSA enVision frequently receives feedback highlighting the need for better performance optimization, a more intuitive search function, and reduced downtime during updates.

Ease of Deployment and Customer Service: Sumo Logic Security is known for its seamless cloud deployment with minimal setup complexities; users also find its customer service responsive and helpful. RSA enVision's deployment is often seen as cumbersome and time-consuming, although it offers strong customer support, it doesn't fully alleviate deployment concerns.

Pricing and ROI: Users favor Sumo Logic Security for its straightforward pricing model and perceived better value for the cost, indicating a strong return on investment. RSA enVision also offers substantial ROI, but higher setup costs and a more complex pricing model make it less attractive in comparison. Sumo Logic Security thus provides a more cost-effective solution.

To learn more, read our detailed RSA enVision vs. Sumo Logic Security Report (Updated: March 2026).

Buyer's Guide

RSA enVision vs. Sumo Logic Security

March 2026

Download the complete report

Helped 885,376 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

RSA enVision

Ranking in Security Information and Event Management (SIEM)

31st

Average Rating

7.2

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Sumo Logic Security

Ranking in Security Information and Event Management (SIEM)

18th

Average Rating

8.2

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Log Management (21st), Security Orchestration Automation and Response (SOAR) (13th)

Mindshare comparison

As of March 2026, in the Security Information and Event Management (SIEM) category, the mindshare of RSA enVision is 0.6%, up from 0.3% compared to the previous year. The mindshare of Sumo Logic Security is 1.7%, up from 0.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM) Mindshare Distribution
Product	Mindshare (%)
Sumo Logic Security	1.7%
RSA enVision	0.6%
Other	97.7%

Security Information and Event Management (SIEM)

Featured Reviews

reviewer1093020

Cyber Security and Compliance Lead Engineer at a comms service provider with 1,001-5,000 employees

Though the solution offers good technical support, it needs to be made more user-friendly

I rate the initial setup a seven and a half out of ten. So, it's closer to seven. The tool is deployed in our organization on-premises with some test servers. In only two tests in a test environment, the deployment can be carried out. The deployment time only depends on the size of your infrastructure. If I limit the company's size, it will not take too much time. So, it can be done in seven to eight hours. Regarding the deployment process, we have managed some test servers, after which we need to install some agents. If you include more servers, you need to install more agents. If you want to use agent-based, I would say that it is totally up to the stakeholder. You will get some additional benefits if you can choose the agent since you will be more assured that less positive false positive results you will get from the tool. For deployment, one test server, a few deployment servers, and some policy configurations are done by the OEM with some local support. We used some Windows servers and Linux servers, and we installed some agents in different types of operating systems. So different versions of Linux and different versions of Windows. We also integrate some network devices like firewalls to integrate firewalls and logs. So, the amount of logs and firewalls is too much. I have to engage too many employees for deployment. So there are those for Linux servers, others for Windows servers, and the rest for network devices. One for SIEM policy creation and one for SIEM management administration is also required.

Read full review

Migell Roberts

Senior Security Analyst at City Electric Supply Company

Security insights have enabled faster incident response and streamlined cross-team collaboration

To improve Sumo Logic Security, I would appreciate the tool being easier to use from a search perspective. For example, we have a few teams that want to use the tool itself, but they are not as savvy when it comes to creating searches from the core platform. I understand that Mobot has come out and is in the works, and it really does assist non-savvy users when it comes to querying the platform. As far as that is concerned, I wish that could be improved a bit more, but I do know that that is in the works. I would add that I wish for improved documentation. For example, we are using Sumo Playbooks and automation integrations along with that, but I have found that there has been a lack of documentation, very little to none at all when it comes to that. With regards to automation integrations as well, there are very few details included in them. I would also appreciate the AWS automation integrations to be more secure because currently, they are using access keys, which involves a user rather than roles, which is the security best practice recommended by AWS. I chose eight out of ten because to make it a nine or ten, I would lean heavily on the documentation. A lot of the times when we get around to configuring things such as playbooks or trying to understand playbooks, what I found was that documentation sometimes is not up to date or documentation is lacking. There are instances also where some security best practices are not being followed. So, if we are able to set up an integration that is not only secure, following security best practices, and has complete documentation, I believe it would alleviate the issue of having to go back and forth with support to check the documentation and things of that nature. My impression of the built-in threat intelligence feature in Sumo Logic Security is that it is comprehensive, but I would say that it could do a little bit better. For example, we have the TAXI feeds, which is STIX and TAXI integrated into the core platform, but the issue I am running into is that I am able to use that feed into a CSE alert; however, I am not able to see the contents of that feed. If I integrate CISA, which we do have integrated, I cannot see what IOCs are in that feed in the core platform, and I hope that is the case because, in order for us to better tune our alerts, we need to be able to see what is in the contents of that threat intelligence feed.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"We developed around this solution and received excellent support from the company."

"The most valuable feature is the management features. It's capable of managing large enterprises."

"The custom dashboard and correlation alerts in this solution improved our incident response process."

"RSA enVision provides the full system visibility of your events within your IT ecosystem."

"The most valuable feature of this solution is the reporting."

"The configuration part is very easy...The technical support was sincere in their responses...I rate the technical support a nine out of ten."

"The ease of log collection and stability of the platform are the most valuable features."

"As a cloud-native SIEM, it scales up very well automatically, and real-time threat detection is available, so detection time has dropped significantly from three to four hours to under 30 minutes, reducing alert fatigue by over 100 days of low-volume alerts and significantly improving our KPIs, alert efficiency, decision quality, and operational stability."

"We are able to diagnose problems before our customers."

"Sumo Logic Security is a good solution for searching the logs and identifying the issues."

"We can integrate threat intelligence solutions into the product."

"Before Sumo Logic, we had to login to every server and verify each error log to determine the problem, and with this tool, we provide every developer team the ability to find errors, then they come to us and ask for specific help."

"Compared to other tools, I prefer the UI much better as it categorizes data very well for me."

"The Log Analytics platform is the most effective. If we cannot find the data in other tools, like email security or NDR, we can fetch those logs in the Log Analytics platform of Sumo Logic."

"My SOC analysts were crushed under Splunk, but Sumo has actually eased the workload and made it tolerable for three people."

More Sumo Logic Security pros

Cons

"In general, the solution currently isn't user-friendly."

"The integration could be easier, it should support more products."

"Sometimes the investigation panel and reporting engine work very slowly."

"Whenever you perform the query, it takes too long."

"Licensing could be improved to be more oriented towards Managed Service Providers (MSPs)."

"RSA enVision log manager is out of date and is not in use anymore."

"There is no future for this solution. It does not exist anymore."

"The integration could be easier, it should support more products."

"The solution should improve its UI."

"If you look at some of the other offerings right now that are available in the market, they do offer APM as well as the product they're offering. I believe Sumo Logic is not there yet. So that's something which I would love to see."

"The pricing could be more competitive. Sumo Logic bills based on the amount of data that you ingest into their platform."

"We would like to have some type of predefined setup for the logs, making the setup easier by default."

"I would like better UI-driven functionality to create alerts and reports. Now, we have to understand the syntax, so it is a little difficult for someone to pick it up without using the manuals."

"I don't recommend this product."

"If you want to up your subscription through the AWS Marketplace, it can be difficult."

"The dashboard has room for improvement, because sometimes it is a difficult to create a specific dashboard or query. This would be a nice place to correct problems."

More Sumo Logic Security cons

Pricing and Cost Advice

"On a scale of one to ten, where one is low, and ten is high price, I rate the pricing a six."

"We no longer pay a licensing fee because it is out of date and don't pay for support."

"The license pricing model is based on the events that are processed through the solution."

"The AWS Marketplace pricing is borderline. Every annual renewal, we always contemplate if we are getting what we think we could out of it or could we do it cheaper with some other product."

"Storing logs in Sumo Logic Security is charged GB-wise, which is a little higher than other products."

"If we went to ELK Stack, which is open source, it would have been less costly, but it would have required more development from our side."

"The AWS Marketplace pricing is fairly reasonable for what it does. I wouldn't call it expensive, but I wouldn't call it cheap. It is pretty good."

"I don't pay the bill. I've heard the AWS Marketplace pricing is high, but I like the value."

"The product is costly."

"Purchasing the solution through the AWS Marketplace is very easy."

More Sumo Logic Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

885,376 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

13%

Construction Company

10%

Comms Service Provider

Financial Services Firm

Manufacturing Company

12%

Financial Services Firm

Computer Software Company

Outsourcing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	5
Large Enterprise	14

Questions from the Community

What needs improvement with RSA enVision?

Licensing could be improved to be more oriented towards Managed Service Providers (MSPs). Perhaps offering different types of licensing would be beneficial, as it can be expensive for industries wi...

See all answers

What advice do you have for others considering RSA enVision?

Overall, I would rate it a nine out of ten. I recommend using it, but it also depends on the needs and the budget. If I still had my company, I think we would continue using RSA enVision. However, ...

See all answers

What is your experience regarding pricing and costs for RSA enVision?

It's competitive, but they need to adapt to MSPs. Maybe that's not their target market, though.

See all answers

What do you like most about Sumo Logic Security?

Sumo Logic Security is a good solution for searching the logs and identifying the issues.

See all answers

What is your experience regarding pricing and costs for Sumo Logic Security?

I would say that the pricing for Sumo Logic Security is in the medium part of the market. If you go to the well-known vendors such as Azure Sentinel or other tools like Splunk, you are going to fin...

See all answers

What needs improvement with Sumo Logic Security?

I would say there are a few more things that Sumo Logic Security can improve on. It is not the tool; it is a technical part. From the app point of view, I would say when we need to include a few la...

See all answers

Comparisons

Splunk Enterprise Security vs RSA enVision

Compared 20% of the time

Securonix Next-Gen SIEM vs RSA enVision

Compared 8% of the time

NetWitness Platform vs RSA enVision

Compared 7% of the time

Wazuh vs RSA enVision

Compared 7% of the time

IBM Watson for Cyber Security vs RSA enVision

Compared 5% of the time

More RSA enVision Competitors

Panther vs Sumo Logic Security

Compared 14% of the time

Splunk Enterprise Security vs Sumo Logic Security

Compared 8% of the time

Microsoft Sentinel vs Sumo Logic Security

Compared 8% of the time

IBM Security QRadar vs Sumo Logic Security

Compared 5% of the time

Sentinel vs Sumo Logic Security

Compared 4% of the time

More Sumo Logic Security Competitors

Product Reports

Buyer's Guide

Security Information and Event Management (SIEM)

March 2026

Download RSA enVision product report

Buyer's Guide

Sumo Logic Security

March 2026

Download Sumo Logic Security product report

Overview

RSA enVision is a comprehensive security information and event management (SIEM) solution offered by RSA, a leading provider of cybersecurity solutions. It enables organizations to collect, analyze, and manage security event data from various sources, providing real-time visibility into their IT infrastructure. With RSA enVision, organizations can proactively detect and respond to security incidents, ensuring the protection of critical assets and sensitive data.

The solution offers a wide range of features, including log management, event correlation, threat intelligence, and compliance reporting. One of the key strengths of RSA enVision is its ability to collect and normalize data from diverse sources, such as network devices, servers, applications, and databases. This allows organizations to gain a holistic view of their security posture and identify potential threats or vulnerabilities.

The event correlation capabilities of RSA enVision enable the detection of complex attack patterns and the identification of potential security incidents. By analyzing events in real-time and correlating them with historical data, the solution can provide actionable insights and alerts to security teams, enabling them to respond quickly and effectively. RSA enVision also offers advanced threat intelligence capabilities, leveraging machine learning and behavioral analytics to identify anomalous activities and potential indicators of compromise. This helps organizations stay ahead of emerging threats and proactively mitigate risks.

RSA enVision provides comprehensive compliance reporting capabilities, helping organizations meet regulatory requirements and demonstrate adherence to industry standards. The solution offers pre-built compliance reports for various regulations, such as PCI DSS, HIPAA, and GDPR, simplifying the audit process and reducing compliance-related costs. In summary, RSA enVision is a powerful SIEM solution that enables organizations to effectively manage their security events, detect and respond to threats, and meet compliance requirements.

With its robust features and capabilities, it provides organizations with the necessary tools to enhance their cybersecurity posture and protect their critical assets.

RSA

Sumo Logic

Sumo Logic is a cloud-based machine data analytics company focusing on security, operations, and BI use cases. It provides log management and analytics services that leverage machine-generated big data to deliver real-time IT insights.

Sumo Logic is developed as a SaaS solution, it processes and analyzes large quantities of IT infrastructure data, spotting patterns and anomalies that can indicate a potential threat or significant event.

The platform is designed to help IT, security, and business operations teams develop, manage, and secure their applications and cloud infrastructures. It collects, aggregates, and analyzes data from various sources including servers, virtual machines, and network devices, providing visibility into complex systems.

What are the key features of Sumo Logic?

Real-time Analytics: Continuous queries and live dashboards that provide insights into application performance, user behavior, and security threats.
Advanced Machine Learning: Utilizes machine learning algorithms to identify trends, anomalies, and patterns.
Integrated Threat Intelligence: Tools and workflows to enhance security postures by detecting threats and anomalies.
Multi-tenant Cloud Service: Allows users to operate in a shared cloud environment securely.

The solution aims to simplify data complexity, streamline operations, and provide actionable insights to businesses across various industries.

Sumo Logic is designed to handle high data volumes from multiple sources without diminishing performance. It is primarily deployed in the cloud with seamless integrations for AWS, Google Cloud, and Microsoft Azure. This flexibility allows users to leverage Sumo Logic’s capabilities regardless of their existing cloud infrastructure.

In summary, Sumo Logic is a comprehensive, AI-driven analytics solution ideal for businesses looking to enhance their IT and security operations through data-driven insights and real-time monitoring. Its flexible deployment options and scalable pricing model make it accessible for various business sizes and sectors.

Sumo Logic

Sample Customers

BPS (SUISSE), Hypovereinsbank Germany, MAX Hamburgers, Infoplex, Neotel, Telus

Information Not Available

Buyer's Guide

RSA enVision vs. Sumo Logic Security

March 2026

Free Report: RSA enVision vs. Sumo Logic Security

Find out what your peers are saying about RSA enVision vs. Sumo Logic Security and other solutions. Updated: March 2026.

DOWNLOAD NOW

885,376 professionals have used our research since 2012.

See our RSA enVision vs. Sumo Logic Security report.

See our list of best Security Information and Event Management (SIEM) vendors and best Security Information and Event Management (SIEM) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.