Alerting and consistency are key. We have different tiers with log collectors, and continuous querying provides near-real-time updates. It's almost like instantly when something happens, like pending transactions or error fees. This helps reduce incident resolution time compared to waiting for thresholds on other platforms. We can continue logging in with them seamlessly and quickly get into action. Another valuable feature is easy custom field creation in Sumo Logic. For example, recently, we had Sumo collect all our container tier load data. Containers can be expensive with heavy logging, so we only wanted important information there. We easily created custom fields without changing our applications because Sumo supported, I think, ten active logging applications at the time. These are heavy applications. Rerouting everything for that field change would have been difficult. So, configuring Sumo Logic, adding a new field, and having applications update that specific field was convenient. Sumo Logic automatically identified different logic categories for us.
