Datadog vs. IBM SevOne vs. Sumo Logic

Datadog may be better suited for teams that have a more out-of-the-box infrastructure, on the primary platforms Datadog supports. You may also have better results if you have a bigger team dedicated to devops and/or a bigger budget. We found that trying to adapt it to our use case (small team, .NET on AWS Fargate) wasn't feasible. We continually ran into roadblocks that required us to dig through documentation (and at times, having to figure out some documentation was wrong), go back and forth with support, and in my opinion, waste money on excessive and unintended usages due to opaque pricing models and inaccurate usage reports, as well as broken/non-functional rate sampling controls.

Incentivized

IBM SevOne ensures deep performance and in depth monitoring and allows customization according to specific organisation or business needs. Availability of real-time alerts and unlimited customization. The software integrates freely with many third party applications and has reliable analytics and reporting systems. Ability of the software in automating routine network monitoring tasks which reduces operational costs. Software pricing is a major challenge towards smooth implementation of the software. It is expensive and not affordable to small businesses and organisations.

SumoLogic is a fantastic log aggregator and analysis tool, a fine alternative to Splunk. Searching is powerful and mostly intuitive and results come fast. If you have application logs in clusters or Kubernetes pods that lose their logs every time they're restarted, Sumo is the solution for you

Incentivized

• The thing which Datadog does really well, one of them are its broad range of services integrations and features which makes it one step observability solution for all. We can monitor all types of our application, infrastructure, hosts, databases etc with Datadog.
• Its custom dashboard feature which helps us to visualize the data in a better way . It supports different types of charts through those charts we can create our dashboard more attractive.
• Its AI powered alerting capability though that we can easily identify the root cause and also it has a low noise alerting capability which means it correlated the similar type of issues.

Incentivized

• To see trends in network usage, identify upgrade switches, increase bandwidth and cabling
• Provide dashboards to operations, logistics for both warehouse and production managers
• Can integrate into incident systems to auto create tickets when issues happen

Incentivized

• Sumo Logic allowed for our InfoSec team to ingest logs from our CDN directly, in real-time, instead of massive compressed archives that were sent every two-hours (the only alternative at the time). Sumo Logic had an app for these logs, that allowed us to easily get an immediate payoff from the data, with canned dashboard and saved searches.
• Sumo Logic has a fairly extensive REST API when it comes to log sources, source configurations, dashboard data, searches, etc. Their wiki for the API is usually kept up to date.
• Sumo Logic, during the period of time I had used their product, had added the ability to configure agents via configuration files. This allowed customers to configure their endpoints, and modify the endpoints, with configuration management tools like Chef / Puppet / Salt. Beforehand, the only option was to always make changes either via the web portal or REST API.
• The solutions engineers were extremely helpful, and easily reachable when issues would occur.
• Users at our company found it easy to get started, working on new dashboards, scheduled searches, and alerting. The alerting worked well with our third-party paging tool.

Incentivized

• Alert windows cause lag in notifications (e.g. if the alert window is X errors in 1 hour, we won't get alerted until the end of the 1 hour range)
• I would appreciate more supportive examples for how to filter and view metrics in the explorer
• I would like a more clear interface for metrics that are missing in a time frame, rather than only showing tags/etc. for metrics that were collected within the currently viewed time frame

Incentivized

• Documentation for the embedded help pages in NMS and more. In my opinion, these do not provide anything of any depth or maybe anything helpful at all. If anything it just seems to be a guide of what actually exists on the page. It is nicely searchable documentation though.
• It is very surprising and disappointing for us to learn that it isn't until the latest version of IBM SevOne that bulk editing was introduced. I think this is such a basic and foundational feature that should have been a part of the original rollout. My team is still trying to configure the REST API.
• It was disappointing for the webinar to start with a speaker who had a thick accent and simply read from slides. To me, it felt hopeless until the second speaker, who was engaging and easy to understand. It's as if this fact wasn't considered. I'm sure the first speaker lost a lot of viewers who didn't stick around to discover the 2nd speaker.
• I asked three different questions during the webinar and none were answered.

Incentivized

• I like the help center, but I think if it had more GUI tools, it could help new users.
• Pulling out data is sometimes hard to read, (Maybe if I knew how to export data better, this would not be an issue for me).
• I would like better know-how on how to create reports that will help our business.

Incentivized

Its a one stop solution for most processes and does reduce cost overall. This does in turn help teams communicate in a much more efficient way, also RUM is a game changer for any quality product; we use RUM alot for debugging and reverse engineering issues. Reports and coverage has been a plus, it all has helped us a lot in our processes.

Incentivized

There are so many features that it can be hard to figure out where you need to go for your own use case. For example, RUM monitoring us buried in a "Digital Experience" sidebar setting when this is one of our key use cases that I sometimes struggle to find in the application. It appears that ECS + Fargate monitoring was recently released which is great because we had to build a lambda reporting solution for ephemeral task monitoring. But this new feature was never on my radar until I starting clicking around the application.

Incentivized

Sumo Logic is very powerful but definitely requires some configuration work to get the most out of it. You can get a certification related to this, but it is definitely not something you can just throw together.

Incentivized

The support team usually gets it right. We did have a rather complicate issue setting up monitoring on a domain controller. However, they are usually responsive and helpful over chat. The downside would be I don’t think they have any phone support. If that is important to you this might not be a good fit.

Incentivized

I would give this rating because I attended a free Sumo Logic training at a WeWork in Chicago. I found the training very useful, and I learned a lot of features that I was not aware of before I went to the training. I like the idea that SumoLogic provides free training seminars. I am certified in level1, and I plan on certifying to level2.

Incentivized

Documentation was difficult to work through, rollout was catastrophic (completely outage)

Incentivized

I was satisfied with the implementation, as at the time, it was the best way to implement the product with the available feature sets in Sumo Logic. User creation and management became more of an issue during continued use, instead of it being an issue related to deploying the product in our environment.

Incentivized

It's a one-stop solution for all our needs whereas in other open-source tools, we have an operational overhead to keep and manage the uptime of these tools as well and also manage their versioning, upgrade, and patching cycle. Also if there are any bugs then we have to raise an open source issue and many problems as we have to keep 2 to 3 people aligned to manage the stack.

Incentivized

IBM SevOne was selected instead of Datadog because it is perfect for large insurance networks and also connects trouble-free between the on-premise and cloud environments. Its alerts are in real-time, it offers comprehensive dashboards and it allows to gain a better grip on the network issues, thus helping to keep the downtime small and the operations well managed thanks to the good communication.

Incentivized

Sumo Logic works very well out of the gate. For a small business it has given us what we need. I worked at a larger company previously, and we produced so many logs we had to create a custom logging service to handle them all. Cost and availability are big issues when deciding between the different services, whether self maintained and hosted, or provided by another company.

Incentivized

I've assisted several OneLogin customers with partner accounts to Sumo Logic. It has always been pleasant.

• Saved us (time & money) from developing our own monitoring utilities that would pale in comparison
• Alerts allow us to remedy issues before our customers even know about them
• Tracking resource usage over time allows us to better plan for future needs, before it becomes a pain-point.

Incentivized

• Being able to create reports with variables, so end users can check on a multitude of devices easily.
• Proactive alarming on issues that will cause outages.
• Automatic provisioning of Virtual Machines into IBM SevOne through the VMWare plugin

Incentivized

• I can't think of any negative side effects other than it being SO slow sometimes, but compared to Splunk everything is slow
• It's SO much cheaper than Splunk that the time it takes to query information is well worth it
• In the times that we've had Sumo go down or stop logging information, we've found that we'd be absolutely lost without Sumo

Incentivized