We use Sumo Logic Security for logging purposes. We store and monitor application logs and VPC flow logs in the solution.
Logs for Security (AWS Built-In)
Sumo Logic Inc.External reviews
371 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Great product at the price
What do you like best about the product?
It does all the jobs that competitors do.
Very simple to handle and implement.
Accepts almost any kind of data and allows preprocessing and flexible indexation.
Customer support is good.
Can handle data streams and frequent API calls for ingestion.
Very simple to handle and implement.
Accepts almost any kind of data and allows preprocessing and flexible indexation.
Customer support is good.
Can handle data streams and frequent API calls for ingestion.
What do you dislike about the product?
I think the documentation needs to be revisited in certain cases.
Preprocessing the data can be simpler on the UI.
Out of the box common preprocessing and structuring methods should be added.
Integration wth salesforce can be improved.
Preprocessing the data can be simpler on the UI.
Out of the box common preprocessing and structuring methods should be added.
Integration wth salesforce can be improved.
What problems is the product solving and how is that benefiting you?
The feature we use the most is the single-pane-of-glass kind of dashboard.
Extremely easy t customize.
Helps us in evaluating the data in much broader manner with an opportunity to drill down if needed.
Allows us the get to the core of issue and analyze and report RCAs faster than before.
Extremely easy t customize.
Helps us in evaluating the data in much broader manner with an opportunity to drill down if needed.
Allows us the get to the core of issue and analyze and report RCAs faster than before.
Probably the easiest system to capture logs and quickly sift through logs to identify what is needed
What do you like best about the product?
I really appreciate the fact that SumoLogic has a pretty performant query engine that allows me to drill down to the specific log entry that I need to resolve either application errors or performance issues. It does this is a relaitvely transparant way so we don't have change our exisitng logging practices.
What do you dislike about the product?
it doesn't default to always searching the latest logs, and you have to manuallly set it every time.
What problems is the product solving and how is that benefiting you?
It allows us to easily get to the logs for all the applications that we deploy and allows us to drill down to the relevant logs
SOARing to new heights
What do you like best about the product?
Integrates with various security tools, user friendly, has multiple features like case, KPI management, etc, which makes work life easier...
What do you dislike about the product?
Sttep Learning, Initial setup challeneges, Integraction Limitations, and has a supportive team if come across any challenges hence no point to dislike
What problems is the product solving and how is that benefiting you?
According to my experience I didn't had any problem but I am sure that if any problem arise the support team will definitely help to overcome
Nice experience of Cloud SOAR
What do you like best about the product?
Enhanced Security Controls
May 29, 2025: Administrators can now set API access key lifetimes and rotation schedules—automating policy adherence and strengthening security.
Exciting New App Integrations & Cloud-to-Cloud Enhancements
June 11, 2025 updates include new integrations for:
Kaltura – Monitor content management metrics like user activity and event distribution.
Bitwarden – Track high-risk events such as vault exports and SSO deactivation.
Sysdig Secure – Gain real-time visibility into vulnerabilities in containerized environments.
Updates to Gigamon Application Metadata Intelligence feature comprehensive security-focused dashboards.
Snowflake (C2C) and Akamai (C2C) sources now import richer data for better analysis.
May 29, 2025: Administrators can now set API access key lifetimes and rotation schedules—automating policy adherence and strengthening security.
Exciting New App Integrations & Cloud-to-Cloud Enhancements
June 11, 2025 updates include new integrations for:
Kaltura – Monitor content management metrics like user activity and event distribution.
Bitwarden – Track high-risk events such as vault exports and SSO deactivation.
Sysdig Secure – Gain real-time visibility into vulnerabilities in containerized environments.
Updates to Gigamon Application Metadata Intelligence feature comprehensive security-focused dashboards.
Snowflake (C2C) and Akamai (C2C) sources now import richer data for better analysis.
What do you dislike about the product?
Search Speed for Very Large Datasets
Although Sumo Logic performs well for most queries, extremely large or complex searches can still take noticeable time.
Implementing smarter indexing or AI-assisted query optimization could speed this up.
Alert Noise Reduction
Sumo Logic provides strong alerting, but in high-volume environments, alert fatigue can become a problem.
Enhanced anomaly detection and auto-suppression for known benign patterns would help reduce noise.
Although Sumo Logic performs well for most queries, extremely large or complex searches can still take noticeable time.
Implementing smarter indexing or AI-assisted query optimization could speed this up.
Alert Noise Reduction
Sumo Logic provides strong alerting, but in high-volume environments, alert fatigue can become a problem.
Enhanced anomaly detection and auto-suppression for known benign patterns would help reduce noise.
What problems is the product solving and how is that benefiting you?
Sumo Logic consolidates logs, metrics, and security events into a single platform, allowing for faster troubleshooting, real-time threat detection, and complete visibility across the stack. This minimizes downtime, enhances security response, ensures compliance, and delivers actionable insights to boost both operational efficiency and customer experience.
High End Security Provision
What do you like best about the product?
ease of use for customers and an amazing backend team available for support
What do you dislike about the product?
very new to using cloudsoar and have not found anything marking it down for, hoping it remains to be the same experience even ahead.
What problems is the product solving and how is that benefiting you?
business security related issues and helping in early stage detection of fraudulent activities
Experience with using CloudSOAR
What do you like best about the product?
1. Cloud Soar lets businesses easily adjust the amount of computer power they use, so they don't waste money on extra hardware.
2. Using Cloud Soar can save money because businesses only pay for what they use, rather than buying and maintaining expensive equipment.
2. Using Cloud Soar can save money because businesses only pay for what they use, rather than buying and maintaining expensive equipment.
What do you dislike about the product?
1. If your internet goes down, you might not be able to access your stuff on Cloud Soar.
2. There's a risk that someone might hack into Cloud Soar and get hold of your sensitive information, so you need to make sure everything is protected properly.
2. There's a risk that someone might hack into Cloud Soar and get hold of your sensitive information, so you need to make sure everything is protected properly.
What problems is the product solving and how is that benefiting you?
To create interactive dashboard such that all the relevant KPIs are under 1 roof
Used to store and monitor application logs and VPC flow logs
What is our primary use case?
What is most valuable?
Sumo Logic Security is a good solution for searching the logs and identifying the issues. Sumo Logic Security searches the logs to identify issues easily. Suppose we got an issue related to the application 500 error. We store the application logs in Sumo Logic Security. We can easily search those logs to identify where exactly we are facing the application 500 error.
What needs improvement?
Sumo Logic Security is expensive, and its pricing could be improved.
What do I think about the stability of the solution?
I rate Sumo Logic Security a nine out of ten for stability.
What do I think about the scalability of the solution?
Around ten users are using the solution in our organization.
I rate the solution an eight to nine out of ten for scalability.
How are customer service and support?
We have two options for technical support. If we take the enterprise support, we get a reply within one or two hours. If you don't have enterprise support, you will get a reply in around one day or 12 hours, based on their availability.
How was the initial setup?
The implementation process of the solution was good and not very difficult. You can easily integrate Sumo Logic Security with AWS or Kubernetes. Even new users who are aware of AWS can follow the documentation and easily deploy the solution.
What about the implementation team?
The solution’s deployment doesn’t take more than 15 minutes for a knowledgeable person.
What's my experience with pricing, setup cost, and licensing?
Storing logs in Sumo Logic Security is charged GB-wise, which is a little higher than other products.
What other advice do I have?
We are mainly concentrating on networking. We use VPC products and application logs to monitor the genuineness of users who have logged in. We also store and monitor GuardDuty logs to see if someone is trying to access the same server multiple times. We are storing and monitoring WAF logs and GuardDuty logs. If someone faces any issues, we'll receive an email and take action based on it.
If someone tries to access one of the applications from a different country, we can search in Google and identify the location of that particular IP address. Sumo Logic Security identifies whether a particular IP address is low, medium, or high risk without the help of Google.
We can store logs in CloudWatch, but it is very difficult to search them in CloudWatch. We should know the query in order to do that. Searching for logs with Sumo Logic Security is very easy compared to CloudWatch. We have been using the solution for more than two years and haven't faced any issues with the solution's availability. I would recommend the solution to other users.
I would recommend Sumo Logic Security instead of AWS, CloudWatch, or CloudTrail. With Sumo Logic Security, you can capture and see all the logs in a single place. If some issues occur, you can log into the solution and verify all the logs. At an organizational level, we have multiple AWS accounts for different environments. Instead of logging in to all the AWS accounts, you can log in to Sumo Logic Security and verify everything.
Overall, I rate the solution a nine out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Helpful but sometimes complicated product
What do you like best about the product?
I have found Sumo Logic can be extremely useful when locating necessary files that may be difficult to locate originally. It is helpful to find necessary files and logs
What do you dislike about the product?
Sometimes it can be difficult trying to find the necessary information. It may take time trying to locate the necessary information.
What problems is the product solving and how is that benefiting you?
It helps with locating and finding necessary files that I may be unable to locate initially with our internal tools. It also helps to find any neccessary changes that are done with our internal systems.
User friendly app
What do you like best about the product?
Easy to read & configure. For all tracing & monitoring we frequency of use is higher, Sumo logic. Ease of integration & Ease of Implementation is also good. Never felt a need to contect Customer Support.
What do you dislike about the product?
Documentation around dashboard configurations & other features related help.
Looks like sumo is providing many features but people are not having enough knowledge ot utilize it at its best
Looks like sumo is providing many features but people are not having enough knowledge ot utilize it at its best
What problems is the product solving and how is that benefiting you?
Tracing & logging helping to solve incidents & find root cause.
Sumologic is the best in town for log processing
What do you like best about the product?
Very powerful analysis language. It allows not only querying but transformations to display the data exactly as needed. Also very good at finding the needle in the haystack.
Easy to start with from the instrumentation point of view, they cover a lot of tech stacks.
Easy to start with from the instrumentation point of view, they cover a lot of tech stacks.
What do you dislike about the product?
Its implementation of metrics, RUM, tracing is all disconnected.
It feels like multiple products put together with no thought of the whole.
No meaningful way to discover what data is available.
The root cause analysis, service diagram and others do not scale, for a big organization they are useless.
It feels like multiple products put together with no thought of the whole.
No meaningful way to discover what data is available.
The root cause analysis, service diagram and others do not scale, for a big organization they are useless.
What problems is the product solving and how is that benefiting you?
It is able to centralize all our telemetry data.
The main benefit is a simple way to find out what is happening with our services.
The main benefit is a simple way to find out what is happening with our services.
showing 81 - 90