Sold by: Sumo Logic Inc.
Deployed on AWS
Monitor your entire AWS environment in minutes. Sumo Logic integrates with your AWS SaaS services, providing unparalleled visibility into your cloud infrastructure and security data at scale.
4.3
Overview
Logs for Security provides a unified security and compliance audit view of your AWS infrastructure and insight into threat activity across that environment. It leverages native AWS tools and telemetry to accelerate the work of development, operations, security, and reliability management teams in maintaining security, monitoring their environment, and managing their risk and attack surface.
Modern ever-changing cloud environments need ongoing audits of configuration, vulnerability, versioning, activity, and other factors to ensure they are well maintained and not subject to vulnerability created by aging or drifting configuration, access rights, or software. Logs for Security helps teams get rapid, ongoing security visibility into the diverse aspects of their environment and provides customizable alerting, evaluation, and remediation of issues.
Sumo Logic rapid onboarding process makes setup easy, allowing AWS users to visualize and begin improving the security posture of their environments in minutes.
New Sumo Logic AWS Built In automation and integration. An AWS Certified deployment that reduces the time and effort to configure your multi-account environment, starting with AWS Control Tower and key Cloud Foundational Services to achieve a stronger security posture that drives efficiency and reduces risk in your business critical applications.
The price below is for a two year subscription to ingest up to 5 GB per day. If you require more than 5 GB per day, please contact your AWS sales representative.
Highlights
- Unified security visibility and analytics across your entire AWS environment using native and 3rd-party data sources.
- Integrated threat intel which accelerates threat detection and reduces the time to detect and investigate
- Global Intelligence Service that creates statistical baselines for Amazon GuardDuty and AWS CloudTrail to help accurately pinpoint investigations and resources
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/24 months |
|---|---|---|
5GB/Day Ingest | 5GB/day ingest with 365 days retention | $13,350.00 |
Dimensions summary
This listing offers one pricing option: a contract for 5GB of daily log ingest with 365 days of retention. You commit to a set daily ingest capacity, and the price covers both the data you send in each day and how long that data stays available for search. Retention is included in the same commitment rather than billed separately. Because there is a single dimension, you choose this option based on your expected daily log volume. To ingest more than 5GB per day, contact the vendor.
Top-of-mind questions for buyers
The 5GB measures the volume of log data you send to the platform each day. This includes cloud logs collected from your environments and other machine data sources routed into the platform for security monitoring. Ingest is measured per day, so your daily log volume should stay within the 5GB capacity.
Retention defines how long your ingested logs stay stored and searchable on the platform. With this option, logs remain available for 365 days. Storage and retention are included in this single commitment, so you do not pay a separate line item for keeping data available across the full year.
This option sets 5GB as your daily ingest capacity. To send more log data per day, you would need a configuration with a larger ingest amount, which requires contacting the vendor. The daily capacity defines the upper limit of logs you can ingest under this commitment.
www.sumologic.com+1
Helpful?
Vendor refund policy
Please see seller website for refund details.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
Start by visiting Sumo Logic Support at https://support.sumologic.com/support/s/ or email us directly at support@sumologic.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Sumo Logic Inc.
By Rapid7
By Splunk
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Unified Security Analytics
Provides unified security visibility and analytics across entire AWS environment by integrating native AWS tools and third-party data sources
Threat Intelligence Integration
Integrates threat intelligence to accelerate threat detection and reduce time to detect and investigate security incidents
Statistical Baseline Analysis
Leverages Global Intelligence Service that creates statistical baselines for Amazon GuardDuty and AWS CloudTrail to pinpoint investigations and resources
Configuration and Vulnerability Auditing
Performs ongoing audits of configuration, vulnerability, versioning, and activity across cloud environments with customizable alerting and remediation
Multi-Account Environment Automation
Provides AWS Certified deployment automation and integration starting with AWS Control Tower and Cloud Foundational Services for multi-account environment configuration
Threat Detection Engine
Library of 900+ out-of-the-box detections with user and attacker behavior analytics backed by community threat intelligence
Data Ingestion and Integration
Ingests CloudTrail, GuardDuty, EC2 network traffic, raw logs via SQS from multiple AWS accounts, on-premises networks, remote endpoints, and SaaS solutions
Investigation and Response Capabilities
Visual investigation timeline with detailed log timelines, automated response workflows, and instant actions such as asset quarantining
Deception Technology
Honeypots, honey credentials, and honey files for layered defense mechanisms
Compliance and Monitoring
File Integrity Monitoring (FIM) with support for PCI, HIPAA, and GDPR compliance requirements, plus detection of new AWS regions, services, and EC2 instance types
Real-time Data Collection and Indexing
Collects and indexes machine-generated data from virtually any source or location in real time with immediate search and analysis capabilities.
Multi-deployment Visibility
Provides single-pane-of-glass visibility across on-premise and cloud deployments, enabling centralized monitoring across hybrid environments.
AWS Service Integration
Supports integration with AWS services including CloudTrail, Config, and VPC Flow Logs for comprehensive AWS environment monitoring.
Pre-built Application Support
Includes support for Splunk apps with pre-defined views for technologies such as Linux, Windows, and VMware.
FedRAMP Authorization
Maintains FedRAMP Moderate authorization for compliance with federal security standards.
Standard contract
No
No
No
Customer reviews
Computer Software
Intuitive UI and Easy Data Collection Setup
Reviewed on Sep 17, 2026
Review provided by G2
What do you like best about the product?
Setting up data collections and reading the logs is pretty intuitive. So is the UI
What do you dislike about the product?
It's very robust, so I am still learning everything it can do.
What problems is the product solving and how is that benefiting you?
Alert investigation and logging.
Chase H.
Sumo Logic is a Phenomenal Tool Backed by an Outstanding Support Team
Reviewed on Sep 17, 2026
Review provided by G2
What do you like best about the product?
The pro serve, sales, team, and support team is by far the best I've worked with no matter what the vendor is. Their tool is phenomenal, but the people we work with are also fantastic.
What do you dislike about the product?
I don't have anything I can think of at this time. Everything has been great.
What problems is the product solving and how is that benefiting you?
Sumo Logic's performance, integrations to our current tooling, and ease of use programmatically and UI-wise have been great. I try to think of things that can't be done within our stack at this time and I can't think of anything.
Christopher T.
Scalable and Fast, But Mobot Needs Work
Reviewed on Sep 17, 2026
Review provided by G2
What do you like best about the product?
I really like the scalability and speed of search that Sumo Logic offers. It's pretty plug and play, and I really appreciate how easy it is to plug into Firehose, making the setup and integration processes smooth for me.
What do you dislike about the product?
The mobot really underwhelms me. I need to guide it so much that it's quicker to just use the log search. It should know my collectors off the bat and what kind of data the collectors have. When I say "show me all my Postgres logs," I shouldn't have to explicitly say use these 6 collectors.
What problems is the product solving and how is that benefiting you?
Sumo Logic helps us with observability by parsing log files and building dashboards and alerts for our AWS resources.
Naveen K.
Powerful Dashboards and Queries for Faster Incident Response
Reviewed on Sep 04, 2026
Review provided by G2
What do you like best about the product?
What I like most about Sumo Logic is how much it helps me work faster and more effectively during day-to-day monitoring and incident investigations. Its dashboards give me a quick view of what is happening across production environments, while powerful queries help me drill into logs, identify patterns, validate alerts, and find the root cause of issues. Reusable queries also save me time by making common investigations much more efficient. Most importantly, Sumo Logic helps me quickly understand whether an issue could impact customers and provide clear, actionable information to the right engineering teams. It gives me the visibility and tools I need to move from detection to investigation and escalation with greater confidence.
What do you dislike about the product?
The biggest downside for me is the learning curve for advanced queries and troubleshooting. When working with complex log structures or trying to build a query from scratch, it can take time to get the syntax and filtering exactly right. Some investigations also require multiple queries or deeper knowledge of how the data is indexed and structured. I’d like to see more intuitive query-building assistance, clearer guidance for complex use cases, and easier ways for newer users to discover relevant fields and existing queries. These are relatively minor compared with the visibility and troubleshooting capabilities Sumo Logic provides, but improving them would make the platform faster and easier to use for day-to-day monitoring.
What problems is the product solving and how is that benefiting you?
Sumo Logic helps me quickly monitor and troubleshoot complex cloud environments. For example, when I receive an alert about a production service, I can use a Sumo Logic dashboard to immediately review related logs and signals, then run targeted queries to determine whether the issue is isolated or could affect multiple customers or services. I can look for error patterns, abnormal activity, and related events without manually searching through multiple systems. Reusable queries and dashboards also make recurring investigations much faster and more consistent. This helps me quickly validate alerts, identify the likely root cause, and provide actionable details when escalating an issue to SRE or DevOps. The biggest benefit to me is speed and visibility: Sumo Logic helps me understand what is happening in production sooner, prioritize potential customer impact, and take the right action before an issue becomes a larger incident.
Recommendations to others considering the product:
To enhance user experience, Sumo Logic could introduce more intuitive query-building tools and provide clearer guidance for complex use cases. Offering tutorials or interactive guides for new users would also be beneficial. Additionally, simplifying the process of discovering relevant fields and existing queries could significantly reduce the learning curve, making the platform more accessible and efficient for day-to-day monitoring.
Computer Software
Flexible, Fast Integrations and Easier Sumo Logic Workflows with Mobot
Reviewed on Aug 27, 2026
Review provided by G2
What do you like best about the product?
What I like most about Sumo Logic is how flexible and fast it is when integrating with different tools. Even when there isn’t a pre-built app available, we can usually find a way to ingest logs from virtually any platform.
Mobot has also made working with the platform much easier, especially for building complex queries and handling other day-to-day Sumo Logic tasks. It has significantly reduced the time and effort needed to get things done.
Mobot has also made working with the platform much easier, especially for building complex queries and handling other day-to-day Sumo Logic tasks. It has significantly reduced the time and effort needed to get things done.
What do you dislike about the product?
One area I would suggest improving is the user interface. The platform is very powerful, but some areas of the interface could be more modern and visually appealing, making the overall user experience more intuitive and engaging.
What problems is the product solving and how is that benefiting you?
Sumo Logic is helping us centralize security visibility across 140+ sources, improve detection and alert triage, and automate repetitive security tasks. This gives our team better visibility, faster investigations, and more efficient day-to-day security operations.