What I like most about Sumo Logic is how flexible and fast it is when integrating with different tools. Even when there isn’t a pre-built app available, we can usually find a way to ingest logs from virtually any platform.

Mobot has also made working with the platform much easier, especially for building complex queries and handling other day-to-day Sumo Logic tasks. It has significantly reduced the time and effort needed to get things done. Review collected by and hosted on G2.com.

One area I would suggest improving is the user interface. The platform is very powerful, but some areas of the interface could be more modern and visually appealing, making the overall user experience more intuitive and engaging. Review collected by and hosted on G2.com.

What stood out to me most was the AI activity monitoring. I can now see exactly who's doing what with Claude, user logins, admin actions, API key creation, all in one place. For an AI engineer, that kind of audit trail is genuinely useful, not just for compliance teams but for debugging access issues and tracking how developers are interacting with the platform Review collected by and hosted on G2.com.

The detection rules are solid for standard compliance scenarios, but as someone building AI-heavy workflows, I'd love more customization options specific to model-level events, not just admin and workspace changes Review collected by and hosted on G2.com.

The pro serve, sales, team, and support team is by far the best I've worked with no matter what the vendor is. Their tool is phenomenal, but the people we work with are also fantastic. Review collected by and hosted on G2.com.

I don't have anything I can think of at this time. Everything has been great. Review collected by and hosted on G2.com.

I really appreciate how fast the search is across a lot of data, and the saved searches are a huge benefit because I often reuse the same queries instead of rebuilding them. Writing and tuning detection rules is pretty straightforward, which makes things easier for us. The support from Sumo Logic has been great since we started using them. The dashboards are very helpful as I can build a specific view around a detection or system and share it with other teams, saving time on having to teach the query language. This setup facilitates better collaboration, as security and operations can look at the same information during an investigation and get to a resolution faster. The initial setup of Sumo Logic was pretty easy, especially with the help we got from their team. It's been overall a great tool, and I consider Sumo Logic our main source of truth. Review collected by and hosted on G2.com.

My one gripe is cost. The pricing is tied to how much you ingest so the bill scales with log volume. We've had to make some tough calls about what to send based on budget based on what we actually want visibility into. Review collected by and hosted on G2.com.

I really like the scalability and speed of search that Sumo Logic offers. It's pretty plug and play, and I really appreciate how easy it is to plug into Firehose, making the setup and integration processes smooth for me. Review collected by and hosted on G2.com.

The mobot really underwhelms me. I need to guide it so much that it's quicker to just use the log search. It should know my collectors off the bat and what kind of data the collectors have. When I say "show me all my Postgres logs," I shouldn't have to explicitly say use these 6 collectors. Review collected by and hosted on G2.com.

It can transform complex operational data into actionable insights, helping customers proactively identify issues and resolve them more quickly by capturing the correct required logs. Review collected by and hosted on G2.com.

Too many logs to read if not specified. Review collected by and hosted on G2.com.

I really appreciate how Sumo Logic correlates incidents from different platforms into insightful signals, giving analysts a comprehensive view for incident investigation, especially on the SIEM side. Its strongest feature for me is the integration, particularly with the MCP server and the SOC analyst agent, which embeds smoothly into our workflow to provide new insights and correlated activities. I also like the detection engineering and rule set fine-tuning capabilities with MCP integration. The cloud-first model makes setup easy, with minimal maintenance since there's nothing on-premise. The fact that everything ultimately got delivered, like custom parsers, is definitely a plus. Review collected by and hosted on G2.com.

I think the biggest area where Sumo Logic could improve is its out-of-the-box rules and SIEM capabilities. They seem to need a significant update to keep up with the current landscape, especially with the rise of AI. The rule sets are still quite basic, and it would be great if there was a way for AI to analyze our large datasets to find attack patterns and create customized rules tailored to our needs. Additionally, the recent UI changes from a non-tab to a tab version, with tabs inside tabs, is quite messy. I would prefer if Sumo Logic stuck to a consistent design rather than trying to cater to everyone. Review collected by and hosted on G2.com.

As a software engineer, what I like best is that Dojo AI actually reduces alert fatigue in a meaningful way. The Summary Agent gives my team a clean, readable explanation of what triggered each Insight, instead of everyone digging through 40 lines of raw log data, they get a clear summary of the key signals, scope, and context. Review collected by and hosted on G2.com.

Onboarding new data sources can still feel clunkier than it should be. We added a new SaaS tool to our stack last quarter and getting the logs flowing correctly into Sumo Logic took almost a full week of back-and-forth with documentation and support Review collected by and hosted on G2.com.

Sumo Logic's Live Tail feature is something I use almost daily, being able to stream real-time logs during a deployment means I catch anomalies within seconds instead of waiting for an alert to fire. The LogReduce clustering has genuinely cut my incident investigation time in half by automatically grouping similar error patterns Review collected by and hosted on G2.com.

The dashboard building experience is where I feel the most friction, there's no drag-and-drop panel resizing, so arranging widgets into a clean layout takes far longer than it should and becomes a real time sink when you're iterating quickly during an incident review Review collected by and hosted on G2.com.

The product integrates easily, and the support has been good. The documentation is clear and well put together, which makes it straightforward to get started and keep things running smoothly. Review collected by and hosted on G2.com.

Sumo’s threat intelligence isn’t very good on its own, but it becomes better when you integrate it with third-party tools. Review collected by and hosted on G2.com.