Splunk Enterprise vs. Sumo Logic

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
Splunk Enterprise
Score 8.3 out of 10
N/A
Splunk is software for searching, monitoring, and analyzing machine-generated big data, via a web-style interface. It captures, indexes and correlates real-time data in a searchable repository from which it can generate graphs, reports, alerts, dashboards and visualizations.N/A
Sumo Logic
Score 7.3 out of 10
N/A
Sumo Logic is a log management offering from the San Francisco based company of the same name.
$3
Per GB Logs
Pricing
Splunk EnterpriseSumo Logic
Editions & Modules
No answers on this topic
Essentials
$3.00
Per GB Logs
Enterprise
$4.00
Per GB Logs
Enterprise Security
$4.25
Per GB Logs
Enterprise Suite
$4.75
Per GB Logs
Offerings
Pricing Offerings
Splunk EnterpriseSumo Logic
Free Trial
YesNo
Free/Freemium Version
YesNo
Premium Consulting/Integration Services
NoNo
Entry-level Setup FeeNo setup feeNo setup fee
Additional Details——
More Pricing Information
Community Pulse
Splunk EnterpriseSumo Logic
Considered Both Products
Splunk Enterprise
Chose Splunk Enterprise
We've tried Sumo before and, while it did improve while we were using it, we ended up often pushing it to its limits, and at times it would fall over. The ingestion limits would at times be restrictive and our systems would generate more than it could handle, which would force …
Sumo Logic
Chose Sumo Logic
We had used Splunk previously. Sumo Logic defeats them when it comes to cost, including the costs that would normally come with supporting/managing/patching/upgrading your own infrastructure and storage. Those were wins, but especially the real-time CDN integrations due to Sumo …
Chose Sumo Logic
Provides the same basic solution as Splunk as it is a central log aggregator. The main difference for us is hosted or cloud vs. on-premise. The other large difference for us was the central management of the collectors. Sumo provides a single view of all the collectors, …
Chose Sumo Logic
We felt the features were comparable and Sumo Logic offered a better price. This was our first log aggregation tool so we don't have a lot of insight for competing products. I speak with many others specifically regarding Splunk and it seems to be comparable in many ways except …
Chose Sumo Logic
It's cheaper, by an ungodly number of dollars. Splunk is insanely expensive. But Splunk is also incredibly fast and efficient. Splunk also holds information indefinitely (forever) so if I wanted to see if a specific end-user clicked a very specific button in 2012, I can search …
Chose Sumo Logic
Sumo hits the right balance between the high price of Splunk and the reduced features and usabilty of cheaper competitors like Graylog and Humio
Chose Sumo Logic
Sumo Logic works very well out of the gate. For a small business it has given us what we need. I worked at a larger company previously, and we produced so many logs we had to create a custom logging service to handle them all. Cost and availability are big issues when …
Chose Sumo Logic
For use this was a better overall solution for our needs. Between reporting, access and the ability to support an external two-factor solution for controlled access.
Chose Sumo Logic
Comparing them to Logstash and other open source tools, Sumo Logic is a clean, already well built tool that is ready to ingest and analyze data instantly. Other open source tools take a lot of time to build and manage; and their graphs/dashboards are almost always lacking. Sumo …
Top Pros
Top Cons
Features
Splunk EnterpriseSumo Logic
Security Information and Event Management (SIEM)
Comparison of Security Information and Event Management (SIEM) features of Product A and Product B
Splunk Enterprise
7.4
54 Ratings
5% below category average
Sumo Logic
-
Ratings
Centralized event and log data collection6.553 Ratings00 Ratings
Correlation6.052 Ratings00 Ratings
Event and log normalization/management6.153 Ratings00 Ratings
Deployment flexibility7.549 Ratings00 Ratings
Integration with Identity and Access Management Tools7.549 Ratings00 Ratings
Custom dashboards and workspaces8.554 Ratings00 Ratings
Host and network-based intrusion detection7.037 Ratings00 Ratings
Data integration/API management8.35 Ratings00 Ratings
Behavioral analytics and baselining7.74 Ratings00 Ratings
Rules-based and algorithmic detection thresholds7.84 Ratings00 Ratings
Response orchestration and automation6.94 Ratings00 Ratings
Reporting and compliance management7.94 Ratings00 Ratings
Incident indexing/searching8.95 Ratings00 Ratings
Best Alternatives
Splunk EnterpriseSumo Logic
Small Businesses
AlienVault USM
AlienVault USM
Score 8.0 out of 10
InfluxDB
InfluxDB
Score 8.5 out of 10
Medium-sized Companies
Splunk Enterprise Security (ES)
Splunk Enterprise Security (ES)
Score 8.4 out of 10
IBM Instana
IBM Instana
Score 9.0 out of 10
Enterprises
Microsoft Sentinel
Microsoft Sentinel
Score 8.5 out of 10
IBM Instana
IBM Instana
Score 9.0 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
Splunk EnterpriseSumo Logic
Likelihood to Recommend
7.0
(70 ratings)
8.9
(14 ratings)
Likelihood to Renew
10.0
(17 ratings)
-
(0 ratings)
Usability
9.0
(3 ratings)
7.5
(3 ratings)
Availability
10.0
(1 ratings)
-
(0 ratings)
Support Rating
8.4
(17 ratings)
8.7
(6 ratings)
Online Training
8.0
(1 ratings)
-
(0 ratings)
Implementation Rating
9.0
(2 ratings)
9.0
(1 ratings)
Product Scalability
9.1
(1 ratings)
-
(0 ratings)
Professional Services
-
(0 ratings)
6.2
(3 ratings)
User Testimonials
Splunk EnterpriseSumo Logic
Likelihood to Recommend
Splunk
Pros: Splunk is very well suited if you have multiple log sources of related data. All of them can be correlated and tasks can be automated based on the requirement. Other than alerts, Splunk can also run a specific script of your choice, based on some defined conditions. Cons: If you have a few logs but a large number of log sources, Splunk can be very expensive.
Read full review
Sumo Logic
SumoLogic is a fantastic log aggregator and analysis tool, a fine alternative to Splunk. Searching is powerful and mostly intuitive and results come fast. If you have application logs in clusters or Kubernetes pods that lose their logs every time they're restarted, Sumo is the solution for you
Read full review
Pros
Splunk
  • Real-time + Scheduled alerts - i-e you can set up alerts which are actively monitoring your logs
  • Pretty good response time for search results. With our key/value logging, Splunk makes it blazing fast to query the data.
  • Dashboards provide insights into historical data
  • Love how Splunk indexes all of the data and provides keys to search on
Read full review
Sumo Logic
  • Sumo Logic allowed for our InfoSec team to ingest logs from our CDN directly, in real-time, instead of massive compressed archives that were sent every two-hours (the only alternative at the time). Sumo Logic had an app for these logs, that allowed us to easily get an immediate payoff from the data, with canned dashboard and saved searches.
  • Sumo Logic has a fairly extensive REST API when it comes to log sources, source configurations, dashboard data, searches, etc. Their wiki for the API is usually kept up to date.
  • Sumo Logic, during the period of time I had used their product, had added the ability to configure agents via configuration files. This allowed customers to configure their endpoints, and modify the endpoints, with configuration management tools like Chef / Puppet / Salt. Beforehand, the only option was to always make changes either via the web portal or REST API.
  • The solutions engineers were extremely helpful, and easily reachable when issues would occur.
  • Users at our company found it easy to get started, working on new dashboards, scheduled searches, and alerting. The alerting worked well with our third-party paging tool.
Read full review
Cons
Splunk
  • At times some queries can run slowly if indices are not on a portion of the query you use.
  • Setup time initially can be difficult if your logs aren't stored in common locations or in a common way to write the log.
  • Ability to ingest logs from different locations without having to change code to put logs in a certain place (pro and con).
  • Searches can be a bit more difficult to look through if your log isn't pulled in a manner that is easy to read through splunk.
Read full review
Sumo Logic
  • I like the help center, but I think if it had more GUI tools, it could help new users.
  • Pulling out data is sometimes hard to read, (Maybe if I knew how to export data better, this would not be an issue for me).
  • I would like better know-how on how to create reports that will help our business.
Read full review
Likelihood to Renew
Splunk
We are using Splunk extensively in our projects and we have recently upgraded to Splunk version 6.0 which is quite efficient and giving expected results. We keep track of updates and new features Splunk introduces periodically and try to introduce those features in our day to day activities for improvement in our reporting system and other tasks.
Read full review
Sumo Logic
No answers on this topic
Usability
Splunk
You can literally throw in a single word into Splunk and it will pull back all instances of that word across all of your logs for the time span you select (provided you have permission to see that data). We have several users who have taken a few of the free courses from Splunk that are able to pull data out of it everyday with little help at all.
Read full review
Sumo Logic
Sumo Logic is very powerful but definitely requires some configuration work to get the most out of it. You can get a certification related to this, but it is definitely not something you can just throw together.
Read full review
Reliability and Availability
Splunk
When properly setup and configured, Splunk is extremely reliable.
Read full review
Sumo Logic
No answers on this topic
Support Rating
Splunk
Splunk maintains a well resourced support system that has been consistent since we purchased the product. They help out in a timely manner and provide expert level information as needed. We typically open cases online and communicate when possible via e-mail and are able to resolve most issues with that method.
Read full review
Sumo Logic
I would give this rating because I attended a free Sumo Logic training at a WeWork in Chicago. I found the training very useful, and I learned a lot of features that I was not aware of before I went to the training. I like the idea that SumoLogic provides free training seminars. I am certified in level1, and I plan on certifying to level2.
Read full review
Online Training
Splunk
The online course was simple clear and described the main capabilities of the solution. There is also an initial module that can be done for free so anyone can familiarize themselves with the functionality of this solution. On the other hand, however, there could be more free online courses. Maybe even with a certificate, this would broaden the group of people who are familiar with the platform while increasing familiarity with the solution itself.
Read full review
Sumo Logic
No answers on this topic
Implementation Rating
Splunk
Smooth without too many major issues.
Read full review
Sumo Logic
I was satisfied with the implementation, as at the time, it was the best way to implement the product with the available feature sets in Sumo Logic. User creation and management became more of an issue during continued use, instead of it being an issue related to deploying the product in our environment.
Read full review
Alternatives Considered
Splunk
I wanted to learn a new language that I can quickly master and implement. Splunk is easy, fun to use and best of all, it can be developed in hours not days or weeks. Splunk is fundamentally a programming language that is minimal but yet powerful enough to collect, analyze and visualize data.
Read full review
Sumo Logic
Sumo Logic works very well out of the gate. For a small business it has given us what we need. I worked at a larger company previously, and we produced so many logs we had to create a custom logging service to handle them all. Cost and availability are big issues when deciding between the different services, whether self maintained and hosted, or provided by another company.
Read full review
Scalability
Splunk
Splunk can scale in to the petabyte per day range which of course is awesome
Read full review
Sumo Logic
No answers on this topic
Professional Services
Splunk
No answers on this topic
Sumo Logic
I've assisted several OneLogin customers with partner accounts to Sumo Logic. It has always been pleasant.
Read full review
Return on Investment
Splunk
  • Overall very positive. It has provided visibility to what is going on within our network.
  • One drawback is the time it takes to get up to speed with the application, but this is up to the user, and Splunk education is excellent.
  • In my field, IT Security, there are few other friends to have in your back pocket better than Splunk. They are just that good.
Read full review
Sumo Logic
  • I can't think of any negative side effects other than it being SO slow sometimes, but compared to Splunk everything is slow
  • It's SO much cheaper than Splunk that the time it takes to query information is well worth it
  • In the times that we've had Sumo go down or stop logging information, we've found that we'd be absolutely lost without Sumo
Read full review
ScreenShots