Splunk Infrastructure Monitoring vs Sumo Logic Observability comparison

Splunk Infrastructure Monitoring vs. Sumo Logic Observability

Download the complete report

Helped 814,528 peers since 2012

Categories and Ranking

Splunk Infrastructure Monit...

Ranking in Cloud Monitoring Software

10th

Average Rating

8.4

Number of Reviews

Ranking in other categories

IT Infrastructure Monitoring (10th), Container Management (10th)

Sumo Logic Observability

Ranking in Cloud Monitoring Software

23rd

Average Rating

7.8

Number of Reviews

Ranking in other categories

Application Performance Monitoring (APM) and Observability (25th), AIOps (13th)

Mindshare comparison

As of November 2024, in the Cloud Monitoring Software category, the mindshare of Splunk Infrastructure Monitoring is 0.8%, up from 0.5% compared to the previous year. The mindshare of Sumo Logic Observability is 0.2%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud Monitoring Software

Featured Reviews

Rodney Riettie

Software Engineer at a healthcare company with 10,001+ employees

Jul 20, 2023

Helps to ingest a massive amount of raw data and use it effectively

A lot of customers had a hard time effectively searching within the data in Splunk. There is a learning curve from searches to indexes and using all the macros that we have created. It is a little difficult for somebody who has not used it quite a bit and does not have a lot of practice with it, but the AI features that we have been hearing about through Splunk will make it a lot easier for us to use human language to search this data. That is big. That is pretty powerful, and that will help a lot with our customers. At the Splunk conference, some of the talks have been about the AI platform and more effective and easier ways to search within Splunk through indexes and other things. These features will help correct some of the things with which we are having a hard time with some of our customers.

Read full review

David Onuh

Senior Software Engineer at MentorMate

Feb 2, 2024

Easy creation of custom fields, no need to alter applications; supports ten active logging applications simultaneously and faster than aster than default search tools

Alerting and consistency are key. We have different tiers with log collectors, and continuous querying provides near-real-time updates. It's almost like instantly when something happens, like pending transactions or error fees. This helps reduce incident resolution time compared to waiting for thresholds on other platforms. We can continue logging in with them seamlessly and quickly get into action. Another valuable feature is easy custom field creation in Sumo Logic. For example, recently, we had Sumo collect all our container tier load data. Containers can be expensive with heavy logging, so we only wanted important information there. We easily created custom fields without changing our applications because Sumo supported, I think, ten active logging applications at the time. These are heavy applications. Rerouting everything for that field change would have been difficult. So, configuring Sumo Logic, adding a new field, and having applications update that specific field was convenient. Sumo Logic automatically identified different logic categories for us.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The initial setup was straightforward. We didn't find it to be too complex."

"The most valuable thing that we have seen within our group is the ability to ingest all this raw data and have it organized in a certain way so that different groups can get effective alerting from this massive amount of raw data that is out there."

"It is very easy to monitor multiple cloud environments. It's like a single pane of glass for us. We can use it to monitor our on-prem and both of our cloud environments as opposed to having different tools for each environment. It makes it all come together in one tool."

"Splunk Infrastructure Monitoring provided our customers with visibility into their overall infrastructure."

"The solution's basic visibility is one of its most valuable features. So, it is a solution that is easy to use...The solution's initial setup process was straightforward."

"The tool's stability is great."

"We haven't really experienced any glitches or bugs."

"The tool is efficient in collecting, monitoring and evaluating logs."

More Splunk Infrastructure Monitoring pros

"I have not seen any stability issues in the product."

"The solution allows multiple groups to converge on a unified platform, allowing for different utilization by various teams."

"The product is easy to learn."

"Alerting and consistency are key. We have different tiers with log collectors, and continuous querying provides near-real-time updates. It's almost like instantly when something happens, like pending transactions or error fees. This helps reduce incident resolution time compared to waiting for thresholds on other platforms. We can continue logging in with them seamlessly and quickly get into action."

"We use queries in Sumo Logic to trigger alerts based on logging. That allows us to proactively identify issues as they're happening."

"Sumo Logic Observability presents a range of valuable features, including well-crafted dashboards and a diverse selection of helpful apps. However, personally, I don't hold a favorable opinion of the solution. While I don't struggle with writing queries, my main difficulty lies in recruiting competent individuals and ensuring their proficiency in utilizing the solution. This often leads to additional challenges and complexities. From my perspective, when compared to Microsoft Sentinel or even Splunk, Sumo Logic Observability has a steeper learning curve. One contributing factor to this disparity is the solution's long existence in the market compared to Synlogic. Nevertheless, I acknowledge that there are capable and knowledgeable professionals employed at Sumo Logic Observability. The effectiveness of the solution largely depends on how it is integrated into your internal operations and environment. Its utility and benefits can vary significantly. It is worth noting that organizations like the NSA and, I believe, the CIA used it in the past, primarily for rapidly searching and analyzing large volumes of data. To leverage its capabilities effectively, you must determine how to tailor it to your specific needs."

Cons

"They can get more integration with a few more products. They can also update some of the dashboards that are in there now."

"It's a bit difficult to use. It takes some time to get into it and to get it to do what you would like it to do. It is not straightforward to use it."

"Splunk could be better integrated with configuration manager solutions so we can automatically resolve issues without human interference."

"We still use Splunk Enterprise licensing. A lot of the newer features go into Splunk Cloud before Enterprise. We're not looking to switch our licensing over, so we're falling behind on the newer features."

"The implementation can be more user-friendly."

"A lot of customers had a hard time effectively searching within the data in Splunk. There is a learning curve from searches to indexes and using all the macros that we have created. It is a little difficult for somebody who has not used it quite a bit and does not have a lot of practice with it, but the AI features that we have been hearing about through Splunk will make it a lot easier for us to use human language to search this data. That is big. That is pretty powerful, and that will help a lot with our customers."

"The solution's stability is an area that has room for improvement. It needs to provide constant stability to its users."

"The solution's machine learning deployment is hard and should be made user-friendly."

More Splunk Infrastructure Monitoring cons

"Documentation could be better. While it's generally good, sometimes finding what you need requires extensive searching. It's not always clear where to look for specific things."

"Implementing a more streamlined enrichment process, and conceptualizing the observability data collection as an ETL pipeline would be helpful."

"SearchUI.exe is a bit clunky in the product, making it an area where the product needs improvements."

"The speed of queries could be improved. When using more advanced functions, especially with large datasets like the 90-day log retention we had, queries could be slow, sometimes taking up to five minutes."

"Fine-grained data can be quite frustrating to work with and should be made easier."

Pricing and Cost Advice

"I would rate the price of Splunk Infrastructure Monitoring as an eight out of ten, with ten being the most expensive."

"Splunk's infrastructure monitoring costs can be high because our billing is based on data volume measured in terabytes, rather than the number of devices being monitored."

"Splunk has been fairly expensive, but it has been predictable."

"I am not in that circle, but we are currently licensing based on our queries. That is working out for us. Previously, it was by volume of data, and now, we can store as much data as we want."

"Splunk Infrastructure Monitoring is an expensive solution."

"It is expensive."

"The solution's pricing is competitive. I rate the solution's pricing a seven out of ten. The price of the solution could be cheaper."

"The product is a bit expensive considering the competition but the company may negotiate the price."

More Splunk Infrastructure Monitoring pricing and cost advice

"Now, they’re not charging by ingests anymore. You should expect the price to be a bit of an unknown and to basically increase as the business increases."

"I started on the free tier to try it out, but because of our usage, we're now paying for it."

See which vendors are best for you

Use our free recommendation engine to learn which Cloud Monitoring Software solutions are best for your needs.

See recommendations

814,528 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

17%

Computer Software Company

16%

Government

Manufacturing Company

Financial Services Firm

20%

Computer Software Company

19%

Manufacturing Company

14%

Transportation Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What do you like most about Splunk Infrastructure Monitoring?

The vibrant dashboards are valuable.

What is your experience regarding pricing and costs for Splunk Infrastructure Monitoring?

Licensing cost is the biggest argument I get from those divesting from Splunk. There are those within our organization who say we are going to go to other tools since Splunk is too expensive. Till ...

What needs improvement with Splunk Infrastructure Monitoring?

We never had any issues when it comes to the type of use cases we are using it for. We did not need more advancement on it, but I know that, in general, everything can be updated. There are tiny li...

What do you like most about Sumo Logic Observability?

The product is easy to learn.

What needs improvement with Sumo Logic Observability?

The speed of queries could be improved. When using more advanced functions, especially with large datasets like the 90-day log retention we had, queries could be slow, sometimes taking up to five m...

What is your primary use case for Sumo Logic Observability?

We used it for log observability – log aggregation specifically.

Amazon CloudWatch vs Splunk Infrastructure Monitoring

Comparisons

Compared 16% of the time

Rancher Labs vs Splunk Infrastructure Monitoring

Compared 14% of the time

ServiceNow IT Operations Management vs Splunk Infrastructure Monitoring

Compared 13% of the time

Nagios XI vs Splunk Infrastructure Monitoring

Compared 9% of the time

PRTG Network Monitor vs Splunk Infrastructure Monitoring

Compared 7% of the time

More Splunk Infrastructure Monitoring Competitors

Dynatrace vs Sumo Logic Observability

Compared 100% of the time

More Sumo Logic Observability Competitors

Product Reports

Splunk Infrastructure Monitoring

Download Splunk Infrastructure Monitoring product report

Sumo Logic Observability

Download Sumo Logic Observability product report

Also Known As

Splunk Insights for Infrastructure

No data available

Learn More

Splunk

Sumo Logic

Overview

Splunk Infrastructure Monitoring offers features including, Instant visualization, real-time actionable alerts, centralized enterprise controls, and scalability.

Instant visualization

Get fast time to value with over 250+ cloud service integrations and pre-built dashboards out of the box for rapid, full-stack visualization. Autodiscover, break down, group, and explore clouds, services and systems in minutes.

Real-time actionable alerts

Act before infrastructure performance affects end-user experience. Instantly detect and accurately alerts on dynamic thresholds, multiple conditions and complex rules to eliminate alert storms and dramatically reduce MTTD/MTTR.

Centralized, enterprise controls

Answer business-critical questions in context and monitor service-level objectives and indicators instantly. Track custom metrics for business KPIs to token based access and usage controls.

Scale with confidence

Troubleshoot across thousands of microservices, multiple ephemeral deployments, application versions and billions of events. Release better apps faster and drive closed-loop automation for a flawless end-user experience.

Sumo Logic Observability is widely used for log aggregation, analysis, and SIEM capabilities. It assists in monitoring data, creating dashboards, and managing log storage.

Sumo Logic Observability helps teams with logging in production, debugging with trace IDs, and performing queries across large datasets. Developers leverage centralized logs for error detection and tracking metrics like successful transactions and data volume. Security teams integrate it with SOAR systems for automation and enhanced security investigations.

What are the key features?

Well-crafted dashboards: Provides visually appealing and easy-to-use dashboards.
Diverse apps: Supports multiple applications for various use cases.
Centralized management: Enables streamlined log management from a unified platform.
Near-real-time alerting: Facilitates quick incident resolution with timely notifications.
Continuous querying: Allows for constant data analysis without interruptions.
Proprietary query language: Offers a robust and flexible language for complex queries.
Custom field creation: Simplifies addition of custom fields for better data categorization.
Robust data tracing: Ensures effective log tracing for efficient debugging and analysis.

What benefits or ROI should users look for?

Improved error detection: Helps quickly identify and address errors in production.
Enhanced security: Integrates with SOAR for better security automation and investigation.
Efficient log management: Centralizes log storage and management, simplifying processes.
Timely incident resolution: Near-real-time alerts and continuous queries lead to faster issue resolution.
Customizable to user needs: Offers flexibility with custom fields and a proprietary query language.

Industries like finance, healthcare, and technology implement Sumo Logic Observability to monitor sensitive data, manage high transaction volumes, and ensure compliance with regulatory standards. Security and development teams benefit from its robust capabilities, enabling effective collaboration and streamlined operations.

Sample Customers

Entrust Datacard

Information Not Available

Splunk Infrastructure Monitoring vs. Sumo Logic Observability