Try our new research platform with insights from 80,000+ expert users

Splunk SOAR vs Sumo Logic Security comparison

Splunk and Sumo Logic are both solutions in the Security Orchestration Automation and Response (SOAR) category. Splunk is ranked #3 with an average rating of 8.0, while Sumo Logic is ranked #15 with an average rating of 7.8. Splunk holds a 7.3% mindshare in SOAR, compared to Sumo Logic’s 1.1% mindshare. Additionally, 86% of Splunk users are willing to recommend the solution, compared to 91% of Sumo Logic users who would recommend it.
Splunk SOAR
Read 45 Splunk SOAR reviews
  • 4,577 Views
  • 2,761 Comparison Views
86% willing to recommend
Sumo Logic Security
Read 20 Sumo Logic Security reviews
  • 443 Views
  • 316 Comparison Views
91% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Dec 5, 2024

Sumo Logic Security and Splunk SOAR compete in the security features category. Splunk SOAR seems to have the upper hand due to its mature orchestration capabilities and automation excellence, which are essential for handling complex security scenarios.

Features: Sumo Logic offers integration of threat intelligence, customizable alerting, and effective log aggregation. Splunk SOAR provides automation and orchestration, playbook creation, and enhanced incident response capabilities.

Room for Improvement: Sumo Logic needs better dashboard customization, improved templates, and quicker support responses. Splunk SOAR should focus on more seamless third-party integration, improved playbook tools, and flexible pricing.

Ease of Deployment and Customer Service: Sumo Logic provides a simpler deployment via AWS Marketplace and is noted for responsive customer support. Splunk SOAR requires more complex setups but offers good support that could benefit from faster response times.

Pricing and ROI: Sumo Logic's pricing is competitive with a good ROI driven by enhancements in process efficiency. Splunk SOAR faces criticism for high costs, especially affecting smaller users, due to the increased price and cost complexity.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Splunk SOAR vs. Sumo Logic Security Report (Updated: April 2025).
Buyer's Guide
Splunk SOAR vs. Sumo Logic Security
April 2025
Download the complete report
Helped 850,028 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.6
Adoption of Splunk SOAR varied, with customization enhancing benefits; successful integration linked to experience, despite initial challenges.
Sentiment score
7.6
Sumo Logic Security improves troubleshooting and operational efficiency, with users finding ROI generally justifies its continued use.
 

Customer Service

Sentiment score
7.2
Splunk SOAR support is generally responsive, yet telecom and IoT cases may face delays; community offers quicker resolutions.
Sentiment score
7.4
Sumo Logic Security's support is responsive and helpful but can occasionally delay up to 48 hours; no phone support mentioned.
Splunk's technical support is very good and generally not needed often due to the stable environment.
For more quotes and insights, download the Splunk SOAR report
They have a response time of forty-eight hours, which is not instant support.
For more quotes and insights, download the Sumo Logic Security report
 

Scalability Issues

Sentiment score
7.1
Splunk SOAR is highly scalable and flexible, though some users encounter minor challenges, mainly linked to internal management.
Sentiment score
8.1
Sumo Logic Security offers scalable, cloud-based solutions praised for integration, performance, and flexibility across diverse infrastructures, with positive user feedback.
It can be extended and adapted as necessary.
For more quotes and insights, download the Splunk SOAR report
The tool has high scalability because everything is based in the cloud.
For more quotes and insights, download the Sumo Logic Security report
 

Stability Issues

Sentiment score
7.5
Splunk SOAR is stable, reliable, with minimal downtime and effective version control, despite occasional external vendor issues.
Sentiment score
8.1
Sumo Logic Security is highly praised for stability, reliability, and maintaining performance under load, with minimal latency issues.
Splunk SOAR provides a stable environment and technology.
For more quotes and insights, download the Splunk SOAR report
If there are many records, the system may stop or the UI may become unresponsive.
For more quotes and insights, download the Sumo Logic Security report
 

Room For Improvement

Splunk SOAR users desire better integration, user interface, documentation, and features like automation, debugging, and reporting for improved operations.
Sumo Logic Security faces challenges in performance, automation, support, API integration, and high costs, needing improvements across multiple areas.
Although it enhances alert handling, it still has a journey to compete with Palo Alto SOAR and FortiSOAR.
To make Splunk SOAR a better solution, there could be better built-in debugging tools, smarter playbook suggestions, and enhanced lifecycle management.
For more quotes and insights, download the Splunk SOAR report
The correlation rules and log mapping are not as mature compared to other SIM tools like Splunk.
This is crucial to sell to the government and financial sectors as they require data retention within each country.
For more quotes and insights, download the Sumo Logic Security report
Hamada Elewa - PeerSpot reviewer
KG
Vinay Patel D N - PeerSpot reviewerWilsonAitan - PeerSpot reviewer
 

Setup Cost

Splunk SOAR's pricing is consumption-based, often deemed expensive, with costs varying by data volume and region, impacting smaller organizations.
Sumo Logic Security users find AWS Marketplace simplifies billing and offers a competitive, cost-effective pricing structure despite scalability concerns.
Splunk SOAR is moderately priced, neither cheap nor overly expensive.
Splunk SOAR is affordable cost-wise only.
For more quotes and insights, download the Splunk SOAR report
This makes it more cost-effective because other solutions often include a third element in their pricing.
For more quotes and insights, download the Sumo Logic Security report
KG
Hamada Elewa - PeerSpot reviewerWilsonAitan - PeerSpot reviewer
 

Valuable Features

Splunk SOAR enhances threat response with automation, integration, customization, and user-friendly features, streamlining workflows and reducing manual tasks.
Sumo Logic Security offers robust threat intelligence, real-time observability, and seamless integrations, making it essential for SecOps teams.
Creating playbooks using the Playbook Editor in Splunk SOAR is easy. The editor is designed to be user-friendly with visual drag and drop features, allowing for easy workflows without writing any code.
The stable environment and the community provide strong support, reducing the need for technical support.
For more quotes and insights, download the Splunk SOAR report
If we cannot find the data in other tools, like email security or NDR, we can fetch those logs in the Log Analytics platform of Sumo Logic.
Sumo Logic Security offers a single dashboard and customization, which are the most valuable features.
For more quotes and insights, download the Sumo Logic Security report
KG
Hamada Elewa - PeerSpot reviewerVinay Patel D N - PeerSpot reviewerWilsonAitan - PeerSpot reviewer
 

Categories and Ranking

Splunk SOAR
Ranking in Security Orchestration Automation and Response (SOAR)
3rd
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
45
Ranking in other categories
No ranking in other categories
Sumo Logic Security
Ranking in Security Orchestration Automation and Response (SOAR)
15th
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
20
Ranking in other categories
Log Management (24th), Security Information and Event Management (SIEM) (25th)
 

Mindshare comparison

As of May 2025, in the Security Orchestration Automation and Response (SOAR) category, the mindshare of Splunk SOAR is 7.3%, down from 8.7% compared to the previous year. The mindshare of Sumo Logic Security is 1.1%, up from 0.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Orchestration Automation and Response (SOAR)
 

Featured Reviews

Shubham Sinha. - PeerSpot reviewer
Helped eliminate repetitive and redundant tasks, but custom functions and reporting need a lot of work
The visibility of the solution’s playbook viewer depends on the right you assign to the analyst. SOAR has the flexibility to distinguish between the roles of analyst and owner. If the analyst's role is to just work on a ticket, they cannot view the playbook design platform. That is limited to the owner. That can be both a good and bad thing. A major problem I have faced in SOAR's rights distribution is roles and responsibilities. Suppose I am initially granted user rights or analyst rights, but later on, I also get admin rights. SOAR is unable to amend the limitations of my role. I raised a support ticket with Splunk about this. They said it's a bug in their 5.3.5 version. To fix this, I had to reinstall the entire platform from scratch, just to amend the rights and responsibilities of one role. This bug was not fixed. Also, the latest GUI is terrible. The previous one was better. Another point is that while using Splunk SOAR in an investigation is not difficult, there are some complex parameters. We have SOAR case management, but the licensing is going to put a big hole in your pocket. Also, there is an issue with investigation node addition. When you are doing node additions you cannot grant the entire environment to have SOAR visibility into the incident. So when you integrate it with an ITSM tool, like ServiceNow or Jira for ticketing purposes, there is a challenge. When you do nodes for investigation on a regular basis, sometimes it does not update our ServiceNow platform, which is terrible. It is a redundant activity for an analyst to update that in the case management as well as in the ITSM tool. Although SOAR provides integration, the functionality of investigation and nodes is terrible when it comes to integration. An additional area for improvement is custom function creation. It's terrible. A newbie cannot create custom functions right away. They would require a solid understanding first. Also, the reporting is really awful. If I want to do a report for a customized time period, such as the last three days or the last four days, or from the 10th to the 12th of June, that is not available in SOAR at all. That kind of feature is available in Cortex XSOAR. Reporting is a real challenge.
Read full review
WilsonAitan - PeerSpot reviewer
Offers a single dashboard with customizable features and a cost-effective pricing structure
Sumo Logic Security offers a single dashboard and customization, which are the most valuable features. Additionally, it has a cost-effective structure because it is based on data storage and the number of scans, rather than uploading data. This cost model impacts the customers positively by offering a more straightforward pricing structure.
Read full review
report
See which vendors are best for you
Use our free recommendation engine to learn which Security Orchestration Automation and Response (SOAR) solutions are best for your needs.
See recommendations
850,028 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Financial Services Firm
13%
Manufacturing Company
11%
Government
8%
Computer Software Company
15%
Financial Services Firm
11%
Government
9%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Splunk Phantom?
Splunk SOAR's quick response to incidents is the most valuable part.
See all answers
What is your experience regarding pricing and costs for Splunk Phantom?
Splunk SOAR is affordable cost-wise only, but not competitive from a technical perspective compared to Palo Alto SOAR and FortiSOAR.
See all answers
What needs improvement with Splunk Phantom?
The creation of playbooks is complex in Splunk SOAR ( /categories/security-orchestration-automation-and-response-soar ), and the number of integrations needs enhancement. Although it enhances alert...
See all answers
What do you like most about Sumo Logic Security?
Sumo Logic Security is a good solution for searching the logs and identifying the issues.
See all answers
What is your experience regarding pricing and costs for Sumo Logic Security?
The pricing structure for Sumo Logic Security is based on two elements: data storage and the number of scans. This makes it more cost-effective because other solutions often include a third element...
See all answers
What needs improvement with Sumo Logic Security?
In terms of improvement, feedback indicates there is a need for a local data center in my country. This is crucial to sell to the government and financial sectors as they require data retention wit...
See all answers
 

Comparisons

Cortex XSIAM vs Splunk SOAR Logo
Cortex XSIAM vs Splunk SOAR
Compared 21% of the time
Palo Alto Networks Cortex XSOAR vs Splunk SOAR Logo
Palo Alto Networks Cortex XSOAR vs Splunk SOAR
Compared 19% of the time
Fortinet FortiSOAR vs Splunk SOAR Logo
Fortinet FortiSOAR vs Splunk SOAR
Compared 10% of the time
Tines vs Splunk SOAR Logo
Tines vs Splunk SOAR
Compared 9% of the time
ServiceNow Security Operations vs Splunk SOAR Logo
ServiceNow Security Operations vs Splunk SOAR
Compared 8% of the time
More Splunk SOAR Competitors
Wazuh vs Sumo Logic Security Logo
Wazuh vs Sumo Logic Security
Compared 14% of the time
Google Chronicle Suite vs Sumo Logic Security Logo
Google Chronicle Suite vs Sumo Logic Security
Compared 12% of the time
Securonix Next-Gen SIEM vs Sumo Logic Security Logo
Securonix Next-Gen SIEM vs Sumo Logic Security
Compared 10% of the time
Microsoft Sentinel vs Sumo Logic Security Logo
Microsoft Sentinel vs Sumo Logic Security
Compared 9% of the time
Rapid7 InsightIDR vs Sumo Logic Security Logo
Rapid7 InsightIDR vs Sumo Logic Security
Compared 8% of the time
More Sumo Logic Security Competitors
 

Product Reports

Buyer's Guide
Splunk SOAR
April 2025
Splunk SOAR reportDownload Splunk SOAR product report
Buyer's Guide
Sumo Logic Security
April 2025
Sumo Logic Security reportDownload Sumo Logic Security product report
 

Also Known As

Phantom
No data available
 

Overview

Splunk SOAR offers features like automation and orchestration of manual tasks, speeding up work, detection and response to advanced and emerging threats. 

Go from overwhelmed to in-control

Automate manual tasks. Address every alert, every day. Establish repeatable procedures that allow security analysts to stop being reactive and focus on mission-critical objectives to protect your business.

Force multiply your team

Orchestrate and automate repetitive tasks, investigation and response to increase efficiency and productivity, and do more with the people you already have. Make a team of three feel like a team of 10.

From 30 minutes to 30 seconds

Work faster with Splunk SOAR. Respond to threats in seconds. Lower your mean time to respond (MTTR) by automating security tasks and workflows across all of your security tools.

End-to-end security operations made easy

Take advantage of Splunk Enterprise Security and Splunk SOAR joining forces to provide a seamless and intuitive SecOps platform to prevent, detect and respond to advanced and emerging threats.

Splunk

Sumo Logic

Sumo Logic is a cloud-based machine data analytics company focusing on security, operations, and BI use cases. It provides log management and analytics services that leverage machine-generated big data to deliver real-time IT insights.

Sumo Logic is developed as a SaaS solution, it processes and analyzes large quantities of IT infrastructure data, spotting patterns and anomalies that can indicate a potential threat or significant event.

The platform is designed to help IT, security, and business operations teams develop, manage, and secure their applications and cloud infrastructures. It collects, aggregates, and analyzes data from various sources including servers, virtual machines, and network devices, providing visibility into complex systems.

What are the key features of Sumo Logic?

  • Real-time Analytics: Continuous queries and live dashboards that provide insights into application performance, user behavior, and security threats.

  • Advanced Machine Learning: Utilizes machine learning algorithms to identify trends, anomalies, and patterns.

  • Integrated Threat Intelligence: Tools and workflows to enhance security postures by detecting threats and anomalies.

  • Multi-tenant Cloud Service: Allows users to operate in a shared cloud environment securely.

The solution aims to simplify data complexity, streamline operations, and provide actionable insights to businesses across various industries.

Sumo Logic is designed to handle high data volumes from multiple sources without diminishing performance. It is primarily deployed in the cloud with seamless integrations for AWS, Google Cloud, and Microsoft Azure. This flexibility allows users to leverage Sumo Logic’s capabilities regardless of their existing cloud infrastructure.

In summary, Sumo Logic is a comprehensive, AI-driven analytics solution ideal for businesses looking to enhance their IT and security operations through data-driven insights and real-time monitoring. Its flexible deployment options and scalable pricing model make it accessible for various business sizes and sectors.

Sumo Logic
 

Sample Customers

Recorded Future, Blackstone
Information Not Available
Buyer's Guide
Splunk SOAR vs. Sumo Logic Security
April 2025
Free Report: Splunk SOAR vs. Sumo Logic Security
Find out what your peers are saying about Splunk SOAR vs. Sumo Logic Security and other solutions. Updated: April 2025.
DOWNLOAD NOW
850,028 professionals have used our research since 2012.
See our Splunk SOAR vs. Sumo Logic Security report.

We monitor all Security Orchestration Automation and Response (SOAR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.