Sumo Logic

Sumo hits the right balance between the high price of Splunk and the reduced features and usabilty of cheaper competitors like Graylog and Humio

I have not looked at any other products like Sumo Logic.

Sumo Logic works very well out of the gate. For a small business it has given us what we need. I worked at a larger company previously, and we produced so many logs we had to create a custom logging service to handle them all. Cost and availability are big issues when deciding between the different services, whether self maintained and hosted, or provided by another company.

It's cheaper, by an ungodly number of dollars. Splunk is insanely expensive. But Splunk is also incredibly fast and efficient. Splunk also holds information indefinitely (forever) so if I wanted to see if a specific end-user clicked a very specific button in 2012, I can search for that and Splunk would find it in a short amount of time. I can do the same thing with Sumo, but only for the last 90-days and that search takes an extremely long time. But, again, for the price that Sumo offers the same tools as Splunk but just not as efficient, it's well worth the inefficiencies to save that kind of money.

We felt the features were comparable and Sumo Logic offered a better price. This was our first log aggregation tool so we don't have a lot of insight for competing products. I speak with many others specifically regarding Splunk and it seems to be comparable in many ways except price. I encourage others to try sumo for that reason.

Provides the same basic solution as Splunk as it is a central log aggregator. The main difference for us is hosted or cloud vs. on-premise. The other large difference for us was the central management of the collectors. Sumo provides a single view of all the collectors, versions, and status.

For use this was a better overall solution for our needs. Between reporting, access and the ability to support an external two-factor solution for controlled access.

Comparing them to Logstash and other open source tools, Sumo Logic is a clean, already well built tool that is ready to ingest and analyze data instantly. Other open source tools take a lot of time to build and manage; and their graphs/dashboards are almost always lacking. Sumo Logic does all the work for you.

We had used Splunk previously. Sumo Logic defeats them when it comes to cost, including the costs that would normally come with supporting/managing/patching/upgrading your own infrastructure and storage. Those were wins, but especially the real-time CDN integrations due to Sumo Logic's collaborations with other vendors.

We had spoken to Logentries and discovered that many of the cons we found with Sumo Logic seemed to have been resolved in their product. Their pitfall was that, at the time, Logentries did not have the ability to get real-time log ingestion from our CDN. They said they had a solution, which was scripted, but we had not evaluated/tested. Logentries also did not have a User / RBAC REST API, and are nowhere near the level of compliance that Sumo Logic had (https://www.sumologic.com/press/2015-02-19/sumo-logic-successfully-completes-pci-data-security-stand...). In the end, I believe Logentries and Sumo Logic would be two good vendors to get involved in a bake-off.