Logs for Security (AWS Built-In)
Sumo Logic Inc.External reviews
365 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Power log aggregation and analysis tool
What do you like best about the product?
I like being able to easily search and correlate data across all our various log files. The query functionality is quite advanced compared to what is available when grepping log files at the command line.
What do you dislike about the product?
It's never going to be as performant as searching fully structured/indexed data. We also have had issues bumping up against our ingress limitations (we have a lot of logs).
What problems is the product solving and how is that benefiting you?
We use sumologic to do investigation during production outages as well as longer-term analysis during product launches (performance monitoring, etc). Using logs to drive dashboards can be challenging to set up but once you do, you not only have a nice high-level dashboard, you can dig in to the low-level details that you're putting into your logs.
Good for light use
What do you like best about the product?
I like that some things can be done really quickly, like outlier detection and easy comparison to time shifted data. I also like that you can easily remove unique data from logs to get a good generic mapping of log data to better understand what is happening with your data. I really like the ease of parsing data and the way data is organized via _sourceCategory. Many high level functions are taken care of for you, so it makes it easier for a beginner to just pick up and use. The training provided is excellent. Keep the free certifications Sumo! Being web hosted, and offering a lower cost than competing products is nice as well.
What do you dislike about the product?
I dislike that the query language is missing many features that competitors products offer, such as string aggregation where multiple values can be combined and split back apart when needed. No macros. Limited dashboard configuration. No way to do drilldowns from dashboard and much more. There just isn't a very good way to do low level manipulation of log data, group data across rows effectively without using a transaction command, or aggregating via numeric stats. It would be nice if panels could be made from dashboards without having to rely on previously made saved searches.
What problems is the product solving and how is that benefiting you?
We are primarily using it for complex monitoring of log data and piping in SQL aggregate data to perform analyses over time when compared to other log data.
Recommendations to others considering the product:
If Splunk isn't in the budget or your needs are not extreme, Sumo Logic will work well. There isn't as much user support as other product communities but there is free product certification and training provided by Sumo. Certs through competitive products are ridiculously expensive.
Great experience, very good performance
What do you like best about the product?
Performance was really good considering some searches where span across millions of logs.
What do you dislike about the product?
I believe the interface for composing the queries could be more friendly (structured?)
What problems is the product solving and how is that benefiting you?
Analyze service production behavior. Great benefits with dashboards.
Sumo Logic offers great capabilities, but needs to mature further
What do you like best about the product?
Very good product, interface and easy to use
What do you dislike about the product?
The product can mature more by offering more benefits and better ease of use and understanding for the novice user
What problems is the product solving and how is that benefiting you?
We are increasing our productivity through the use of this products automation capabilities
Recommendations to others considering the product:
Great product, but users need training to better understand the use and management of this product. not intuitive
Very powerful log management tool with a bit of a learning curve
What do you like best about the product?
I've only used the Log Management solution provided by Sumo Logic, so this review is based on that.
It's a very powerful tool where you can query logs in pretty much any way you can imagine. Our service had very high log traffic across many services. Sumo logic was able to keep up, and we could query logs in a variety of ways.
It's a very powerful tool where you can query logs in pretty much any way you can imagine. Our service had very high log traffic across many services. Sumo logic was able to keep up, and we could query logs in a variety of ways.
What do you dislike about the product?
It has a pretty steep learning curve. The query language is pretty solid, but it takes some time to figure it out.
What problems is the product solving and how is that benefiting you?
When debugging an error or series of events someone performed, sumo logic logs would make it easy to query the relevant logs and follow what went on. We could also query logs for usage stats and pretty much anything we could imagine.
Recommendations to others considering the product:
Make sure you give it a good try. It's very powerful.
Search language capability
What do you like best about the product?
Identification of messages is a great feature and the web application troubleshooting is straightforward. Inlije the clean interface.
What do you dislike about the product?
The metrics are not as valuable as they could be, seems that the algorithems could be a bit more robust.
What problems is the product solving and how is that benefiting you?
Log query, application behavior monitoring, and realtime incident security analysis
Evaluated
What do you like best about the product?
Simplicity and get the job done when needed for a quick glance of any system performance.
What do you dislike about the product?
Didn't get a chance to use many of the advanced features.
What problems is the product solving and how is that benefiting you?
Understanding the system metrics
showing 31 - 37