TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Splunk Enterprise

    Score8.6 out of 10
    N/ASplunk is software for searching, monitoring, and analyzing machine-generated big data, via a web-style interface. It captures, indexes and correlates real-time data in a searchable repository from which it can generate graphs, reports, alerts, dashboards and visualizations.N/A

    Sumo Logic

    Score8.9 out of 10
    N/ASumo Logic is a log management offering from the San Francisco based company of the same name.

    $3

    Per GB Logs

    Pricing
    Splunk EnterpriseSumo Logic
    Editions & Modules
    No answers on this topic
    Essentials
    $3.00
    Per GB Logs
    Enterprise
    $4.00
    Per GB Logs
    Enterprise Security
    $4.25
    Per GB Logs
    Enterprise Suite
    $4.75
    Per GB Logs
    Offerings
    Pricing Offerings
    Splunk EnterpriseSumo Logic
    Free Trial
    YesNo
    Free/Freemium Version
    YesNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    Splunk EnterpriseSumo Logic
    Considered Both Products
    Cisco
    Chose Splunk Enterprise
    We've tried Sumo before and, while it did improve while we were using it, we ended up often pushing it to its limits, and at times it would fall over. The ingestion limits would at times be restrictive and our systems would generate more than it could handle, which would force …
    Incentivized
    Sumo Logic
    Chose Sumo Logic
    Sumo hits the right balance between the high price of Splunk and the reduced features and usabilty of cheaper competitors like Graylog and Humio
    Incentivized
    Chose Sumo Logic
    It's cheaper, by an ungodly number of dollars. Splunk is insanely expensive. But Splunk is also incredibly fast and efficient. Splunk also holds information indefinitely (forever) so if I wanted to see if a specific end-user clicked a very specific button in 2012, I can search …
    Incentivized
    Chose Sumo Logic
    We felt the features were comparable and Sumo Logic offered a better price. This was our first log aggregation tool so we don't have a lot of insight for competing products. I speak with many others specifically regarding Splunk and it seems to be comparable in many ways except …
    Incentivized
    Chose Sumo Logic
    Provides the same basic solution as Splunk as it is a central log aggregator. The main difference for us is hosted or cloud vs. on-premise. The other large difference for us was the central management of the collectors. Sumo provides a single view of all the collectors, …
    Incentivized
    Chose Sumo Logic
    We had used Splunk previously. Sumo Logic defeats them when it comes to cost, including the costs that would normally come with supporting/managing/patching/upgrading your own infrastructure and storage. Those were wins, but especially the real-time CDN integrations due to Sumo …
    Incentivized
    Chose Sumo Logic
    Sumo Logic works very well out of the gate. For a small business it has given us what we need. I worked at a larger company previously, and we produced so many logs we had to create a custom logging service to handle them all. Cost and availability are big issues when …
    Incentivized
    Chose Sumo Logic
    For use this was a better overall solution for our needs. Between reporting, access and the ability to support an external two-factor solution for controlled access.
    Incentivized
    Chose Sumo Logic
    Comparing them to Logstash and other open source tools, Sumo Logic is a clean, already well built tool that is ready to ingest and analyze data instantly. Other open source tools take a lot of time to build and manage; and their graphs/dashboards are almost always lacking. Sumo …
    Incentivized
    Key User Insights
    Would buy again
    97%
    Would buy again
    59 Answers
    89%
    Would buy again
    8 Answers
    Delivers good value for the price
    94%
    Delivers good value for the price
    49 Answers
    100%
    Delivers good value for the price
    9 Answers
    Happy with the feature set
    97%
    Happy with the feature set
    59 Answers
    89%
    Happy with the feature set
    8 Answers
    Lived up to sales and marketing promises
    93%
    Lived up to sales and marketing promises
    43 Answers
    No answers on this topic
    Implementation went as expected
    96%
    Implementation went as expected
    50 Answers
    100%
    Implementation went as expected
    6 Answers
    Features
    Splunk EnterpriseSumo Logic
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of Splunk Enterprise and Sumo Logic
    Feature
    Splunk Enterprise
    8.2
    91 Ratings
    3% above category average
    Sumo Logic
    -
    Ratings
    Centralized event and log data collection9.085 Ratings00 Ratings
    Correlation8.487 Ratings00 Ratings
    Event and log normalization/management8.488 Ratings00 Ratings
    Deployment flexibility8.081 Ratings00 Ratings
    Integration with Identity and Access Management Tools8.282 Ratings00 Ratings
    Custom dashboards and workspaces8.887 Ratings00 Ratings
    Host and network-based intrusion detection7.865 Ratings00 Ratings
    Data integration/API management8.334 Ratings00 Ratings
    Behavioral analytics and baselining7.732 Ratings00 Ratings
    Rules-based and algorithmic detection thresholds7.933 Ratings00 Ratings
    Response orchestration and automation7.529 Ratings00 Ratings
    Reporting and compliance management8.634 Ratings00 Ratings
    Incident indexing/searching8.737 Ratings00 Ratings
    Best Alternatives
    Splunk EnterpriseSumo Logic
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    IBM Security QRadar SIEM
    Score8.9 out of 10
    IBM Security QRadar SIEM
    Score8.9 out of 10
    Enterprises
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Splunk EnterpriseSumo Logic
    Likelihood to Recommend
    8.7
    (112 ratings)
    9.7
    (17 ratings)
    Likelihood to Renew
    8.5
    (25 ratings)
    -
    (0 ratings)
    Usability
    8.5
    (45 ratings)
    9.0
    (5 ratings)
    Availability
    10.0
    (1 ratings)
    -
    (0 ratings)
    Support Rating
    8.0
    (19 ratings)
    8.7
    (6 ratings)
    Online Training
    8.0
    (1 ratings)
    -
    (0 ratings)
    Implementation Rating
    7.0
    (3 ratings)
    9.0
    (1 ratings)
    Product Scalability
    9.1
    (1 ratings)
    -
    (0 ratings)
    Professional Services
    -
    (0 ratings)
    6.2
    (3 ratings)
    User Testimonials
    Splunk EnterpriseSumo Logic
    Likelihood to Recommend
    Cisco
    I'm liking the newer products, and I'm looking forward to how they integrate with the overall product when they come together. Just log in and be able to query a large number of systems for similar issues or a unique one. That is a great fit for Splunk Enterprise, looking for a simple case or a simple String or something of that nature across multiple machines. It's a great fit for that to identify issues or particular software, whatever your scenario is, String, to find it across any particular server or group of servers, so that you can update or do a deployment or whatever it is you're looking to do.
    Incentivized
    Read full review
    Sumo Logic
    SumoLogic is a fantastic log aggregator and analysis tool, a fine alternative to Splunk. Searching is powerful and mostly intuitive and results come fast. If you have application logs in clusters or Kubernetes pods that lose their logs every time they're restarted, Sumo is the solution for you
    Incentivized
    Read full review
    Pros
    Cisco
    • It is very useful in creating custom rules for analyzing system logs and display relevant information. The query language is very easy to learn.
    • We can create custom UI to visualize the output of our data. The interface is very flexible. It also allows the sharing of rules among users.
    • There is an open online community to help others. Stackoverflow also has a splunk community. These resources make it more convenient to learn.
    Incentivized
    Read full review
    Sumo Logic
    • Sumo Logic allowed for our InfoSec team to ingest logs from our CDN directly, in real-time, instead of massive compressed archives that were sent every two-hours (the only alternative at the time). Sumo Logic had an app for these logs, that allowed us to easily get an immediate payoff from the data, with canned dashboard and saved searches.
    • Sumo Logic has a fairly extensive REST API when it comes to log sources, source configurations, dashboard data, searches, etc. Their wiki for the API is usually kept up to date.
    • Sumo Logic, during the period of time I had used their product, had added the ability to configure agents via configuration files. This allowed customers to configure their endpoints, and modify the endpoints, with configuration management tools like Chef / Puppet / Salt. Beforehand, the only option was to always make changes either via the web portal or REST API.
    • The solutions engineers were extremely helpful, and easily reachable when issues would occur.
    • Users at our company found it easy to get started, working on new dashboards, scheduled searches, and alerting. The alerting worked well with our third-party paging tool.
    Incentivized
    Read full review
    Cons
    Cisco
    • Splunk light limits number of users to 5. Wish there was a flexible license, where one could add more users.
    • Splunk light does not let you add > few realtime alerts. Wish there was a flexible license, where one could add as many realtime alerts as wanted.
    • Better insight into daily ingestion values
    Incentivized
    Read full review
    Sumo Logic
    • I like the help center, but I think if it had more GUI tools, it could help new users.
    • Pulling out data is sometimes hard to read, (Maybe if I knew how to export data better, this would not be an issue for me).
    • I would like better know-how on how to create reports that will help our business.
    Incentivized
    Read full review
    Likelihood to Renew
    Cisco
    We are using Splunk extensively in our projects and we have recently upgraded to Splunk version 6.0 which is quite efficient and giving expected results. We keep track of updates and new features Splunk introduces periodically and try to introduce those features in our day to day activities for improvement in our reporting system and other tasks.
    Read full review
    Sumo Logic
    No answers on this topic
    Usability
    Cisco
    You can literally throw in a single word into Splunk and it will pull back all instances of that word across all of your logs for the time span you select (provided you have permission to see that data). We have several users who have taken a few of the free courses from Splunk that are able to pull data out of it everyday with little help at all.
    Incentivized
    Read full review
    Sumo Logic
    Sumo Logic is very powerful but definitely requires some configuration work to get the most out of it. You can get a certification related to this, but it is definitely not something you can just throw together.
    Incentivized
    Read full review
    Reliability and Availability
    Cisco
    When properly setup and configured, Splunk is extremely reliable.
    Incentivized
    Read full review
    Sumo Logic
    No answers on this topic
    Support Rating
    Cisco
    Splunk maintains a well resourced support system that has been consistent since we purchased the product. They help out in a timely manner and provide expert level information as needed. We typically open cases online and communicate when possible via e-mail and are able to resolve most issues with that method.
    Incentivized
    Read full review
    Sumo Logic
    I would give this rating because I attended a free Sumo Logic training at a WeWork in Chicago. I found the training very useful, and I learned a lot of features that I was not aware of before I went to the training. I like the idea that SumoLogic provides free training seminars. I am certified in level1, and I plan on certifying to level2.
    Incentivized
    Read full review
    Online Training
    Cisco
    The online course was simple clear and described the main capabilities of the solution. There is also an initial module that can be done for free so anyone can familiarize themselves with the functionality of this solution. On the other hand, however, there could be more free online courses. Maybe even with a certificate, this would broaden the group of people who are familiar with the platform while increasing familiarity with the solution itself.
    Read full review
    Sumo Logic
    No answers on this topic
    Implementation Rating
    Cisco
    Smooth without too many major issues.
    Incentivized
    Read full review
    Sumo Logic
    I was satisfied with the implementation, as at the time, it was the best way to implement the product with the available feature sets in Sumo Logic. User creation and management became more of an issue during continued use, instead of it being an issue related to deploying the product in our environment.
    Incentivized
    Read full review
    Alternatives Considered
    Cisco
    A lot of products have natively inside their own dashboards and or their own logging repositories. And each one is difficult to learn or they're too complex or they're not verbose in the sense that they're not easy to mine the data that you're looking for. So that could be anything from the native logging that you find in other Cisco products. It's easier to use Splunk to draw the data that you're looking for as opposed to going to the individual's products themselves to get the logs that you're looking for.
    Incentivized
    Read full review
    Sumo Logic
    Sumo Logic works very well out of the gate. For a small business it has given us what we need. I worked at a larger company previously, and we produced so many logs we had to create a custom logging service to handle them all. Cost and availability are big issues when deciding between the different services, whether self maintained and hosted, or provided by another company.
    Incentivized
    Read full review
    Scalability
    Cisco
    Splunk can scale in to the petabyte per day range which of course is awesome
    Read full review
    Sumo Logic
    No answers on this topic
    Professional Services
    Cisco
    No answers on this topic
    Sumo Logic
    I've assisted several OneLogin customers with partner accounts to Sumo Logic. It has always been pleasant.
    Read full review
    Return on Investment
    Cisco
    • Splunk has allowed developers to diagnose production issues when access of control was taken away from them to be allowed to view items in production environments and I believe that is invaluable.
    • At times some developers weren't super happy about using it, but it was more of the fact that they were used to having production access and not creating their splunk queries to get information.
    • Going one place to view logs was very beneficial to have.
    Incentivized
    Read full review
    Sumo Logic
    • I can't think of any negative side effects other than it being SO slow sometimes, but compared to Splunk everything is slow
    • It's SO much cheaper than Splunk that the time it takes to query information is well worth it
    • In the times that we've had Sumo go down or stop logging information, we've found that we'd be absolutely lost without Sumo
    Incentivized
    Read full review
    ScreenShots