Try our new research platform with insights from 80,000+ expert users

Elastic Security vs Sumo Logic Security comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 18, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Torq
Sponsored
Ranking in Security Orchestration Automation and Response (SOAR)
8th
Average Rating
8.0
Reviews Sentiment
2.2
Number of Reviews
1
Ranking in other categories
AI-SOC (13th), AI-Powered Security Automation (2nd)
Elastic Security
Ranking in Security Orchestration Automation and Response (SOAR)
5th
Average Rating
7.8
Reviews Sentiment
6.8
Number of Reviews
66
Ranking in other categories
Log Management (8th), Security Information and Event Management (SIEM) (5th), Endpoint Detection and Response (EDR) (15th), Extended Detection and Response (XDR) (8th)
Sumo Logic Security
Ranking in Security Orchestration Automation and Response (SOAR)
20th
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
21
Ranking in other categories
Log Management (38th), Security Information and Event Management (SIEM) (30th)
 

Featured Reviews

reviewer2767650 - PeerSpot reviewer
Senior Consultant at a university with 10,001+ employees
Have found automation to save analyst time but miss more accurate data classification
From our research and testing with the tool, we determined there need to be modifications and changes to train the LLM on the back end. It was able to capture data but was unable to differentiate between the agent hostname we are using and the hostname that resides on the back end of the Internet. It was unable to do that sort of classification. We concluded this tool would be more suitable for initial ticket management rather than security automation. Regarding data handling, I would give preference to Torq. For case management, Cortex and its dashboards prove more useful. Cortex and Palo's solutions do not have as much capability as Torq provides with the same tools. However, Torq's dashboards could be improved, especially on the case management side.
Laurentiu Popescu - PeerSpot reviewer
Chief Product Officer at ClusterPower
Has improved threat detection with deep log analysis and streamlined investigation workflows
The most useful features I find in Elastic Security are the forensic ones that allow us to carry deeper analysis into the logs for in-depth investigations, and the dashboards, with the reporting dashboard being quite user-friendly. Elastic Security is quite good at identifying threats, as it is part of the deep investigation tool that I mentioned before. Unless we need to look further into a certain log, we can carry out a deeper analysis and forensics on those particular logs. I can assess the impact of Elastic Security's real-time data analysis on our threat response efficiency as working pretty good. We are looking for real-time analysis because we have a continuous inflow of logs from different sources: from our cloud, from Active Directory, from our network. So it works pretty well.
SC
CSO at Altera
Has improved implementation speed and coverage but lacks contextual accuracy in alerts
One major improvement I would suggest for Sumo Logic Security is in its risk-based alerting system; while it initially sounds clever and modern, it works as a point-based system where an IP address or entity gets points for bad actions, raising alerts when enough points are collected. This can lead to alerts that are collections of disjointed signals that sometimes make no sense and lack real context; this simplistic approach makes it hard to find coherent stories during investigations. To improve in the support area, I recommend enhancing the technical part because, while the process is good, the actual quality may depend on the personnel involved.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"As an analyst, it has demonstrated potential to reduce workforce requirements and time needed for related activities."
"The visualization is very good."
"The indexes allow you to get your results quickly. The filtering and log passing is the advantage of Logstash."
"Elastic Security helps improve the security posture of Pakistan through centralized visibility and real-time processing."
"The most valuable feature is the speed, as it responds in a very short time."
"The solution is quite stable. The performance has been good."
"ELK is open-source, and it will give you the framework you need to build everything from scratch."
"Elastic Security is very customizable, and the dashboards are very easy to build."
"It's simple and easy to use."
"We can ingest logs and make reports out of them. It is a good tool which can help us monitor any issues."
"Sumo Logic is an easy solution to use. You can set it up very quickly, and it includes a lot of training videos."
"We use it to ingest Windows domain controller logs. We use this to monitor if anyone is placed in particular administration groups that potentially shouldn't be. It helps us keep track of people."
"It provides easy visibility. I also like the shareable queries because we share a lot across groups."
"Technical support is always great."
"The features I find most useful in Sumo Logic Security are the ease of implementation and connectors; they have a very easy connection and many connectors to important systems, making it very easy to implement and fast to start running in production."
"With this tool, we provide access to every developer team the ability to find errors, then they come to us and ask for specific help."
"Scalability has been good for our needs. We haven't run into any scaling issues in regards to size so far."
 

Cons

"It was able to capture data but was unable to differentiate between the agent hostname we are using and the hostname that resides on the back end of the Internet."
"Their visuals and graphs need to be better."
"Elastic Security can be a bit difficult to use if a person only has experience in SMBs with tools like Zoho. The product can also be difficult for those who have never dealt with query language."
"Improvements in Elastic Security could include refining and normalizing queries to make them more user-friendly, enhancing the user experience with better documentation, and addressing any latency issues."
"In terms of improvement, there could be more automation in responding to and evaluating detections."
"I would like more ways to manage permissions and restrict access to certain users."
"I do not have any specific recommendations for improvements in Elastic Security, but I feel that the AI module should get more mature."
"The training that is offered for Elastic is in need of improvement because there is no depth to it."
"Upgrades currently released as stacks when it should be a plugin or an extension to save removal and reinstallation."
"There are some API gaps that are missing."
"The API integration in Sumo Logic Security could improve. There are delayed connections or they stop and then automatically start. Having a seamless log collection would be beneficial."
"If you want to up your subscription through the AWS Marketplace, it can be difficult. You can't just go back to the AWS Marketplace, and say, "I want a bigger one now." You have to contact the sales team, then they do it on the back-end. This could definitely be improved."
"I don't recommend this product."
"There needs to be improvement on imported data which can be used within Sumo Logic to do more advanced queries."
"It took a bit of trial and error to get it set up correctly based on everything we had to do. In the end, we had to send everything over HTTP, which was sort of a stop-gap."
"It would be nice to have an improved ability to scroll through logs within a time frame. Right now, we can search for specific errors. However, if we want to look for "before and after" within a specific time frame, it's not easy using the tool. This would be an improvement."
"Sumo Logic needs to make sure integrating solutions are seamless."
 

Pricing and Cost Advice

Information not available
"It's a monthly cost with Elastic SIEM, but I am not sure of the exact cost."
"It is easy to deploy, easy to use, and you get everything you need to become operational with it, and have nothing further to pay unless you want the OLED plugin."
"I can say that the product is cheaply priced."
"There is no charge for using the open-source version."
"Affordable but with additional costs"
"The pricing is in the middle. I think it is not an expensive experience if we compare it with big names, for example, QRadar, and also Oxide. I think Elastic Security is quite cheap. I would rate the pricing of this solution a five out of ten."
"I find it better than Splunk in terms of cost-effectiveness. For cost-effectiveness, I would rate it a nine out of 10."
"Compared to other products such as Dynatrace, this is one of the cheaper options."
"I don't pay the bill. I've heard the AWS Marketplace pricing is high, but I like the value."
"The price scaling comes in a bit expensive."
"Purchasing Sumo Logic through the AWS Marketplace was a simple step."
"Purchasing the solution through the AWS Marketplace is very easy."
"The product is costly."
"If we went to ELK Stack, which is open source, it would have been less costly, but it would have required more development from our side."
"The AWS Marketplace pricing is borderline. Every annual renewal, we always contemplate if we are getting what we think we could out of it or could we do it cheaper with some other product."
"Storing logs in Sumo Logic Security is charged GB-wise, which is a little higher than other products."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
879,853 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
9%
Manufacturing Company
7%
Healthcare Company
6%
Computer Software Company
13%
Government
9%
Comms Service Provider
8%
Manufacturing Company
7%
Manufacturing Company
13%
Computer Software Company
10%
Financial Services Firm
8%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business40
Midsize Enterprise11
Large Enterprise15
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise3
Large Enterprise13
 

Questions from the Community

What needs improvement with Torq?
From our research and testing with the tool, we determined there need to be modifications and changes to train the LL...
What is your primary use case for Torq?
I used Torq for conducting one of the proof of evaluations for a vendor we are connected with. I am currently working...
What advice do you have for others considering Torq?
One of our members uses AWS, and we receive their feed. This involves triaging AWS-related logs. While I do not have ...
Datadog vs ELK: which one is good in terms of performance, cost and efficiency?
With Datadog, we have near-live visibility across our entire platform. We have seen APM metrics impacted several time...
What do you like most about Elastic Security?
Elastic provides the capability to index quickly due to the reverse indexes it offers. This data is crucial as it con...
What is your experience regarding pricing and costs for Elastic Security?
I am satisfied with the pricing, setup cost, and licensing cost. It is a pure 10.
What do you like most about Sumo Logic Security?
Sumo Logic Security is a good solution for searching the logs and identifying the issues.
What is your experience regarding pricing and costs for Sumo Logic Security?
The pricing structure for Sumo Logic Security is based on two elements: data storage and the number of scans. This ma...
What needs improvement with Sumo Logic Security?
One major improvement I would suggest for Sumo Logic Security is in its risk-based alerting system; while it initiall...
 

Also Known As

No data available
Elastic SIEM, ELK Logstash
No data available
 

Overview

 

Sample Customers

Information Not Available
Texas A&M, U.S. Air Force, NuScale Power, Martin's Point Health Care
Information Not Available
Find out what your peers are saying about Elastic Security vs. Sumo Logic Security and other solutions. Updated: December 2025.
879,853 professionals have used our research since 2012.