Try our new research platform with insights from 80,000+ expert users

Cribl vs Sumo Logic Observability comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 24, 2024
 

Categories and Ranking

Cribl
Ranking in Application Performance Monitoring (APM) and Observability
14th
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
10
Ranking in other categories
Data Integration (17th), Log Management (13th), Cloud Data Integration (13th), Data Preparation Tools (4th)
Sumo Logic Observability
Ranking in Application Performance Monitoring (APM) and Observability
23rd
Average Rating
7.8
Reviews Sentiment
7.2
Number of Reviews
6
Ranking in other categories
Cloud Monitoring Software (22nd), AIOps (11th)
 

Mindshare comparison

As of December 2024, in the Application Performance Monitoring (APM) and Observability category, the mindshare of Cribl is 0.3%, up from 0.0% compared to the previous year. The mindshare of Sumo Logic Observability is 0.1%, down from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Performance Monitoring (APM) and Observability
 

Featured Reviews

Hariram G - PeerSpot reviewer
Collects logs from various cloud sources with reduced costs and improved efficiency
Cribl has simplified many aspects of the onboarding process, but there's still room for improvement. Currently, no other tools in the market truly compete with Cribl in its niche. Splunk is trying to retain customers by developing ingest actions to reduce licensing costs, hoping to prevent them from switching to Cribl. There is no alerting mechanism for the leader/worker nodes status. Since Cribl plays a major role in the mid-layer between the source and destination, there's a slight risk of losing data at some points while receiving real time data. It would be helpful if Cribl could temporarily store or index the data for a specific time range. This would prevent data loss during downtime. Additionally, there's room for improvement in how Cribl handles historical data. Currently, I can't view trends beyond a week, and even then, it’s often limited to just 24 hours. Since Cribl doesn’t index the data but only forwards it, extending the period for viewing statistics and monitoring trends would be a valuable enhancement.
David Onuh - PeerSpot reviewer
Easy creation of custom fields, no need to alter applications; supports ten active logging applications simultaneously and faster than aster than default search tools
Alerting and consistency are key. We have different tiers with log collectors, and continuous querying provides near-real-time updates. It's almost like instantly when something happens, like pending transactions or error fees. This helps reduce incident resolution time compared to waiting for thresholds on other platforms. We can continue logging in with them seamlessly and quickly get into action. Another valuable feature is easy custom field creation in Sumo Logic. For example, recently, we had Sumo collect all our container tier load data. Containers can be expensive with heavy logging, so we only wanted important information there. We easily created custom fields without changing our applications because Sumo supported, I think, ten active logging applications at the time. These are heavy applications. Rerouting everything for that field change would have been difficult. So, configuring Sumo Logic, adding a new field, and having applications update that specific field was convenient. Sumo Logic automatically identified different logic categories for us.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I'd rate the solution ten out of ten."
"When it comes to the product's installation phase, it is not tough for people who have good knowledge...The tool is worth the investment."
"The support team was very helpful and managed to get everything production-ready."
"The platform's most valuable feature is the ability to transform data in real-time within the pipeline without sending it to a destination."
"My favorite option in Cribl is the Stream product."
"The capability to reduce logs in a user-friendly manner is a standout feature. Cribl allows us to view logs live as they are being processed, giving us quick feedback on the changes made."
"Cribl offers other valuable features. For instance, you can replay data from an edge device, store your daily data in a stream, and replay specific event data into Splunk if a security incident occurs"
"Cribl offers easy plugin configurations and source collection settings, allowing us to collect logs from any source."
"Alerting and consistency are key. We have different tiers with log collectors, and continuous querying provides near-real-time updates. It's almost like instantly when something happens, like pending transactions or error fees. This helps reduce incident resolution time compared to waiting for thresholds on other platforms. We can continue logging in with them seamlessly and quickly get into action."
"Sumo Logic Observability presents a range of valuable features, including well-crafted dashboards and a diverse selection of helpful apps. However, personally, I don't hold a favorable opinion of the solution. While I don't struggle with writing queries, my main difficulty lies in recruiting competent individuals and ensuring their proficiency in utilizing the solution. This often leads to additional challenges and complexities. From my perspective, when compared to Microsoft Sentinel or even Splunk, Sumo Logic Observability has a steeper learning curve. One contributing factor to this disparity is the solution's long existence in the market compared to Synlogic. Nevertheless, I acknowledge that there are capable and knowledgeable professionals employed at Sumo Logic Observability. The effectiveness of the solution largely depends on how it is integrated into your internal operations and environment. Its utility and benefits can vary significantly. It is worth noting that organizations like the NSA and, I believe, the CIA used it in the past, primarily for rapidly searching and analyzing large volumes of data. To leverage its capabilities effectively, you must determine how to tailor it to your specific needs."
"The solution allows multiple groups to converge on a unified platform, allowing for different utilization by various teams."
"I have not seen any stability issues in the product."
"The product is easy to learn."
"We use queries in Sumo Logic to trigger alerts based on logging. That allows us to proactively identify issues as they're happening."
 

Cons

"There is no alerting mechanism for the leader/worker nodes status."
"The sys logging could be enhanced to make it easier to identify errors, especially when dealing with multiple functions."
"Cribl should consider adding more features that are applicable to smaller firms, allowing broader access to their data migration through Cribl."
"Perhaps more flexibility in terms of metrics would be helpful."
"Cribl doesn't have as many packs available"
"There is room for improvement in the documentation and knowledge base, particularly regarding configurations like sources where logs are being ingested"
"Cribl could improve by offering easier integrations with enterprise products, similar to what Splunk provides."
"There have been several administrative issues. Another point is that the browsing functions aren't very intuitive."
"SearchUI.exe is a bit clunky in the product, making it an area where the product needs improvements."
"Documentation could be better. While it's generally good, sometimes finding what you need requires extensive searching. It's not always clear where to look for specific things."
"Fine-grained data can be quite frustrating to work with and should be made easier."
"The speed of queries could be improved. When using more advanced functions, especially with large datasets like the 90-day log retention we had, queries could be slow, sometimes taking up to five minutes."
"Implementing a more streamlined enrichment process, and conceptualizing the observability data collection as an ETL pipeline would be helpful."
 

Pricing and Cost Advice

"The product pricing is reasonable compared to other solutions."
"I would not say it is a cheaply priced tool as it has been doing wonders in the market. The tool has been budget-friendly for organizations."
"Now, they’re not charging by ingests anymore. You should expect the price to be a bit of an unknown and to basically increase as the business increases."
"I started on the free tier to try it out, but because of our usage, we're now paying for it."
report
Use our free recommendation engine to learn which Application Performance Monitoring (APM) and Observability solutions are best for your needs.
824,052 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
19%
Computer Software Company
10%
Healthcare Company
8%
Government
7%
Financial Services Firm
21%
Computer Software Company
16%
Manufacturing Company
12%
Transportation Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Cribl?
I am not aware of the pricing details, however, I know they use a credit format for billing.
What needs improvement with Cribl?
At the moment, I don't have specific feedback on what can be improved as I do not work with Cribl daily. Perhaps more flexibility in terms of metrics would be helpful.
What is your primary use case for Cribl?
I am using Cribl to have everything centralized in one tool in terms of data collection. We were working with different Splunk customers, and Cribl helps collect data and then send it to an S3 buck...
What needs improvement with Sumo Logic Observability?
The speed of queries could be improved. When using more advanced functions, especially with large datasets like the 90-day log retention we had, queries could be slow, sometimes taking up to five m...
What is your primary use case for Sumo Logic Observability?
We used it for log observability – log aggregation specifically.
 

Comparisons

 

Learn More

 

Overview

Find out what your peers are saying about Cribl vs. Sumo Logic Observability and other solutions. Updated: December 2024.
824,052 professionals have used our research since 2012.