Try our new research platform with insights from 80,000+ expert users

AlienVault OSSIM vs Sumo Logic Security comparison

AT&T and Sumo Logic are both solutions in the Security Information and Event Management (SIEM) category. AT&T is ranked #10 with an average rating of 7.4, while Sumo Logic is ranked #25 with an average rating of 7.8. AT&T holds a 3.9% mindshare in SIEM, compared to Sumo Logic’s 0.9% mindshare. Additionally, 80% of AT&T users are willing to recommend the solution, compared to 91% of Sumo Logic users who would recommend it.
AlienVault OSSIM
Read 31 AlienVault OSSIM reviews
  • 5,499 Views
  • 3,751 Comparison Views
80% willing to recommend
Sumo Logic Security
Read 20 Sumo Logic Security reviews
  • 1,253 Views
  • 893 Comparison Views
91% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Sep 18, 2024

Sumo Logic Security and AlienVault OSSIM are both prominent security solutions. Sumo Logic Security seems to have the upper hand with its comprehensive analytics and support.

Features: Sumo Logic Security is valued for its robust data analytics capabilities, insightful security monitoring, and strong support system. AlienVault OSSIM stands out with powerful asset discovery, behavioral monitoring, and seamless threat intelligence integration.

Room for Improvement: Sumo Logic Security could enhance integration with third-party tools and improve ecosystem compatibility, while AlienVault OSSIM needs better documentation, ease of use, and refined user guidance.

Ease of Deployment and Customer Service: Sumo Logic Security users highlight a straightforward deployment process and commendable customer service with quick support responses. AlienVault OSSIM has a steeper learning curve during deployment but offers ongoing support. The difference lies in Sumo Logic’s expedited deployment versus AlienVault’s comprehensive but initially challenging setup.

Pricing and ROI: Sumo Logic Security's setup costs are higher, but users feel the investment is justified by the ROI through advanced analytics. AlienVault OSSIM offers better initial cost efficiency and satisfactory ROI but needs more transparent pricing models.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed AlienVault OSSIM vs. Sumo Logic Security Report (Updated: April 2025).
Buyer's Guide
AlienVault OSSIM vs. Sumo Logic Security
April 2025
Download the complete report
Helped 848,253 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

AlienVault OSSIM
Ranking in Security Information and Event Management (SIEM)
10th
Average Rating
7.4
Reviews Sentiment
7.1
Number of Reviews
31
Ranking in other categories
No ranking in other categories
Sumo Logic Security
Ranking in Security Information and Event Management (SIEM)
25th
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
20
Ranking in other categories
Log Management (24th), Security Orchestration Automation and Response (SOAR) (15th)
 

Mindshare comparison

As of April 2025, in the Security Information and Event Management (SIEM) category, the mindshare of AlienVault OSSIM is 3.9%, up from 3.6% compared to the previous year. The mindshare of Sumo Logic Security is 0.9%, up from 0.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM)
 

Featured Reviews

Aman Aijaz - PeerSpot reviewer
An easy-to-scale open-source solution used for monitoring events on devices
The area for improvement is a lot. When I started using it on our enterprise side, the issue we faced was, for example, if we were running at that time on AlienVault OSSIM v5.7.4. So, for some orders, we had to install some packages, and when we tried installing that package, some dependencies got upgraded to a new version. Now once that dependency got upgraded, the SQL, since you might be aware that OSSIM uses SQL database, now SQL and all the dependency in everything was not on the same version, and that caused the database to crash. The aforementioned area should be eased out by upgrading the patches and upgrading dependencies. This kind of thing is a disadvantage of OSSIM, and I would like them to work on this. But I have also raised service requests many times and gave it a push on the community section too. However, since it is a local source, they don't reply much over there. That is why I don't like to work on OSSIM because it is unpredictable. Once the storage goes above 50 percent, it starts behaving unpredictably. If you get stuck with a situation, then you need to drill a lockdown into that. Sometimes you get no luck. Then you have to just reimage the server with the new fresh OS of AlienVault. As for additional features, not much because if you move to the newer version, it is kind of getting more stable. But, to make my life easier, then I would say try to give more features. I know it's open source, so they also cannot provide me with more features. But still, if they can provide me with more features because right now it's becoming old. Right now, we are even moving from SIEM to Security Data Lake. So when we move to it, this will be literally outdated. No one can even expect anything out of it. The way security is moving, it will be outdated very soon. They have to also provide something new to keep this going for the future also.
Read full review
WilsonAitan - PeerSpot reviewer
Offers a single dashboard with customizable features and a cost-effective pricing structure
Sumo Logic Security offers a single dashboard and customization, which are the most valuable features. Additionally, it has a cost-effective structure because it is based on data storage and the number of scans, rather than uploading data. This cost model impacts the customers positively by offering a more straightforward pricing structure.
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable features of AlienVault OSSIM are case management, ease of configuration, and investigation."
"You pay monthly for the solution. I think it's one of the best products. If you compare with other companies, like LogRhythm, etc., the top 8 or 10 CMs, I think Alien Vault has the best price-performance ratio."
"I recommend it due to the experience of the people running it."
"With AlienVault you get everything in one box."
"The threat alerts it gives me from time to time on harmful code within the network, or if they are generating any network traffic, are very useful."
"The solution has a very good open source community, and whenever we have problems, we are always able to resolve it online."
"The solution is very stable. Compared to Qradar and Splunk, it's very stable."
"The paid version of the solution has reporting and better scalability options."
More AlienVault OSSIM pros
"We can integrate threat intelligence solutions into the product."
"We have used it many times to find a root cause of a live issue, then fix the problem in the applications."
"We use it to ingest Windows domain controller logs. We use this to monitor if anyone is placed in particular administration groups that potentially shouldn't be. It helps us keep track of people."
"Sumo Logic Security is a good solution for searching the logs and identifying the issues."
"Sumo Logic is an easy solution to use. You can set it up very quickly, and it includes a lot of training videos."
"The Log Analytics platform is the most effective. If we cannot find the data in other tools, like email security or NDR, we can fetch those logs in the Log Analytics platform of Sumo Logic."
"Sumo Logic Security offers a single dashboard and customization, which are the most valuable features."
"The features I found valuable with the Sumo Logic Security solution are the search option and the ability to customize the search for the information in the logs."
More Sumo Logic Security pros
 

Cons

"I suggest more in-built rules based on modern threats and environments to make it a more competitive solution."
"Lacking in depth of reporting."
"It's so hard to configure and explore something new on it."
"There are somewhat more false positives with the user behavior analytics, which could benefit from an additional machine learning model to detect user patterns more rapidly."
"They can add more compliance templates."
"AlienVault OSSIM failed to provide our company a full insight, while also giving out a lot of false positives."
"The documentation could be improved."
"I don't like to work on OSSIM because it is unpredictable."
More AlienVault OSSIM cons
"It would be nice to have an improved ability to scroll through logs within a time frame. Right now, we can search for specific errors. However, if we want to look for "before and after" within a specific time frame, it's not easy using the tool. This would be an improvement."
"We would like to have some type of predefined setup for the logs, making the setup easier by default."
"The correlation rules and log mapping are not as mature compared to other SIM tools like Splunk."
"I would like to see improvement in the user experience when configuring things, ingesting logs, and creating ports."
"There needs to be improvement on imported data which can be used within Sumo Logic to do more advanced queries."
"I would like better UI-driven functionality to create alerts and reports. Now, we have to understand the syntax, so it is a little difficult for someone to pick it up without using the manuals. If there was more of a graphical user interface, it would be beneficial."
"From the network segmentation side, there is some discrepancy in log onboarding. The tool needs to improve direct API integrations, login integration, native login integration, etc."
"The initial setup is the most stressful, like learning how to use it."
More Sumo Logic Security cons
 

Pricing and Cost Advice

"OSSIM is free."
"AlienVault OSSIM is expensive compared to its competitors."
"I used the paid version of the tool and found it to be expensive. It has been a while since I changed to Securonix. I will have to check whether AlienVault charges per device, user, or log."
"The licensing fees for the non-community edition are paid on an annual basis, and there are no costs in addition to this."
"AlienVault OSSIM is free."
"The tool's licensing costs are yearly."
"The solution is open source, so it's free to use."
"AlienVault pricing is the best. Whatever cost you are paying, you are getting a return on every penny... It's not like your IBM, your QRadar, or Splunk, where the cost is too high."
More AlienVault OSSIM pricing and cost advice
"Purchasing Sumo Logic through the AWS Marketplace was a simple step."
"The AWS Marketplace pricing is borderline. Every annual renewal, we always contemplate if we are getting what we think we could out of it or could we do it cheaper with some other product."
"The license pricing model is based on the events that are processed through the solution."
"I don't pay the bill. I've heard the AWS Marketplace pricing is high, but I like the value."
"Pricing has been cheaper than some of the competing tools, like Splunk."
"The pricing is good. It's not an issue for us."
"Purchasing the solution through the AWS Marketplace is very easy."
"We chose to go through the AWS Marketplace because it makes it a lot easier when we bill our customers. Rather than having to get multiple different sources of information then correlate a monthly bill for our customers, it is just included in the AWS usage charges."
More Sumo Logic Security pricing and cost advice
report
See which vendors are best for you
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
See recommendations
848,253 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Comms Service Provider
10%
Financial Services Firm
9%
University
7%
Computer Software Company
14%
Financial Services Firm
11%
Government
9%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about AlienVault OSSIM?
Asset discovery is good.
See all answers
What is your experience regarding pricing and costs for AlienVault OSSIM?
It depends. I would need to review their cost models, but generally, they are on a scaled basis based on throughput usage. Because it's a software as a service solution for their core product for U...
See all answers
What needs improvement with AlienVault OSSIM?
Scaling for USM is always challenging for any product unless it is purpose-built or overbuilt at the front end. They will use Palo Alto and its competitors, and LevelBlue will manage that implement...
See all answers
What do you like most about Sumo Logic Security?
Sumo Logic Security is a good solution for searching the logs and identifying the issues.
See all answers
What is your experience regarding pricing and costs for Sumo Logic Security?
The pricing structure for Sumo Logic Security is based on two elements: data storage and the number of scans. This makes it more cost-effective because other solutions often include a third element...
See all answers
What needs improvement with Sumo Logic Security?
In terms of improvement, feedback indicates there is a need for a local data center in my country. This is crucial to sell to the government and financial sectors as they require data retention wit...
See all answers
 

Comparisons

Wazuh vs AlienVault OSSIM Logo
Wazuh vs AlienVault OSSIM
Compared 80% of the time
USM Anywhere vs AlienVault OSSIM Logo
USM Anywhere vs AlienVault OSSIM
Compared 5% of the time
Elastic Security vs AlienVault OSSIM Logo
Elastic Security vs AlienVault OSSIM
Compared 4% of the time
Splunk Enterprise Security vs AlienVault OSSIM Logo
Splunk Enterprise Security vs AlienVault OSSIM
Compared 2% of the time
Rapid7 InsightIDR vs AlienVault OSSIM Logo
Rapid7 InsightIDR vs AlienVault OSSIM
Compared 2% of the time
More AlienVault OSSIM Competitors
Wazuh vs Sumo Logic Security Logo
Wazuh vs Sumo Logic Security
Compared 14% of the time
Google Chronicle Suite vs Sumo Logic Security Logo
Google Chronicle Suite vs Sumo Logic Security
Compared 14% of the time
Securonix Next-Gen SIEM vs Sumo Logic Security Logo
Securonix Next-Gen SIEM vs Sumo Logic Security
Compared 9% of the time
Microsoft Sentinel vs Sumo Logic Security Logo
Microsoft Sentinel vs Sumo Logic Security
Compared 8% of the time
Rapid7 InsightIDR vs Sumo Logic Security Logo
Rapid7 InsightIDR vs Sumo Logic Security
Compared 8% of the time
More Sumo Logic Security Competitors
 

Product Reports

Buyer's Guide
AlienVault OSSIM
April 2025
AlienVault OSSIM reportDownload AlienVault OSSIM product report
Buyer's Guide
Sumo Logic Security
March 2025
Sumo Logic Security reportDownload Sumo Logic Security product report
 

Also Known As

OSSIM
No data available
 

Overview

AlienVault OSSIM, Open Source Security Information and Event Management (SIEM), provides you with a feature-rich open source SIEM complete with event collection, normalization and correlation. Launched by security engineers because of the lack of available open source products, AlienVault OSSIM was created specifically to address the reality many security professionals face: A SIEM, whether it is open source or commercial, is virtually useless without the basic security controls necessary for security visibility.

AT&T

Sumo Logic

Sumo Logic is a cloud-based machine data analytics company focusing on security, operations, and BI use cases. It provides log management and analytics services that leverage machine-generated big data to deliver real-time IT insights.

Sumo Logic is developed as a SaaS solution, it processes and analyzes large quantities of IT infrastructure data, spotting patterns and anomalies that can indicate a potential threat or significant event.

The platform is designed to help IT, security, and business operations teams develop, manage, and secure their applications and cloud infrastructures. It collects, aggregates, and analyzes data from various sources including servers, virtual machines, and network devices, providing visibility into complex systems.

What are the key features of Sumo Logic?

  • Real-time Analytics: Continuous queries and live dashboards that provide insights into application performance, user behavior, and security threats.

  • Advanced Machine Learning: Utilizes machine learning algorithms to identify trends, anomalies, and patterns.

  • Integrated Threat Intelligence: Tools and workflows to enhance security postures by detecting threats and anomalies.

  • Multi-tenant Cloud Service: Allows users to operate in a shared cloud environment securely.

The solution aims to simplify data complexity, streamline operations, and provide actionable insights to businesses across various industries.

Sumo Logic is designed to handle high data volumes from multiple sources without diminishing performance. It is primarily deployed in the cloud with seamless integrations for AWS, Google Cloud, and Microsoft Azure. This flexibility allows users to leverage Sumo Logic’s capabilities regardless of their existing cloud infrastructure.

In summary, Sumo Logic is a comprehensive, AI-driven analytics solution ideal for businesses looking to enhance their IT and security operations through data-driven insights and real-time monitoring. Its flexible deployment options and scalable pricing model make it accessible for various business sizes and sectors.

Sumo Logic
 

Sample Customers

Council Rock School District
Information Not Available
Buyer's Guide
AlienVault OSSIM vs. Sumo Logic Security
April 2025
Free Report: AlienVault OSSIM vs. Sumo Logic Security
Find out what your peers are saying about AlienVault OSSIM vs. Sumo Logic Security and other solutions. Updated: April 2025.
DOWNLOAD NOW
848,253 professionals have used our research since 2012.
See our AlienVault OSSIM vs. Sumo Logic Security report.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.