Sold by: Sumo Logic Inc.
Deployed on AWS
Monitor your entire AWS environment in minutes. Sumo Logic integrates with your AWS SaaS services, providing unparalleled visibility into your cloud infrastructure and security data at scale.
4.3
Overview
Logs for Security provides a unified security and compliance audit view of your AWS infrastructure and insight into threat activity across that environment. It leverages native AWS tools and telemetry to accelerate the work of development, operations, security, and reliability management teams in maintaining security, monitoring their environment, and managing their risk and attack surface.
Modern ever-changing cloud environments need ongoing audits of configuration, vulnerability, versioning, activity, and other factors to ensure they are well maintained and not subject to vulnerability created by aging or drifting configuration, access rights, or software. Logs for Security helps teams get rapid, ongoing security visibility into the diverse aspects of their environment and provides customizable alerting, evaluation, and remediation of issues.
Sumo Logic rapid onboarding process makes setup easy, allowing AWS users to visualize and begin improving the security posture of their environments in minutes.
New Sumo Logic AWS Built In automation and integration. An AWS Certified deployment that reduces the time and effort to configure your multi-account environment, starting with AWS Control Tower and key Cloud Foundational Services to achieve a stronger security posture that drives efficiency and reduces risk in your business critical applications.
The price below is for a two year subscription to ingest up to 5 GB per day. If you require more than 5 GB per day, please contact your AWS sales representative.
Highlights
- Unified security visibility and analytics across your entire AWS environment using native and 3rd-party data sources.
- Integrated threat intel which accelerates threat detection and reduces the time to detect and investigate
- Global Intelligence Service that creates statistical baselines for Amazon GuardDuty and AWS CloudTrail to help accurately pinpoint investigations and resources
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/24 months |
|---|---|---|
5GB/Day Ingest | 5GB/day ingest with 365 days retention | $13,350.00 |
Vendor refund policy
Please see seller website for refund details.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
Start by visiting Sumo Logic Support at https://support.sumologic.com/support/s/ or email us directly at support@sumologic.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Sumo Logic Inc.
By Rapid7
By Splunk
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Unified Security Visibility
Provides unified security and compliance audit view across entire AWS infrastructure using native and third-party data sources with analytics capabilities
Threat Intelligence Integration
Integrates threat intelligence to accelerate threat detection and reduce time to detect and investigate security incidents
Statistical Baseline Analysis
Leverages Global Intelligence Service that creates statistical baselines for Amazon GuardDuty and AWS CloudTrail to pinpoint investigations and resources
Multi-Account Environment Configuration
Supports AWS Certified deployment with AWS Control Tower integration for automated configuration of multi-account environments
Customizable Security Alerting
Provides customizable alerting, evaluation, and remediation capabilities for configuration, vulnerability, versioning, and activity monitoring
Threat Detection Engine
Library of 900+ out-of-the-box detections with user and attacker behavior analytics backed by community threat intelligence
Data Ingestion and Integration
Ingests CloudTrail, GuardDuty, EC2 network traffic, raw logs via SQS from multiple AWS accounts, on-premises networks, remote endpoints, and SaaS solutions
Investigation and Response Capabilities
Visual investigation timeline with detailed log timelines, automated response workflows, and instant actions such as asset quarantining
Deception Technology
Honeypots, honey credentials, and honey files for layered defense mechanisms
Compliance and Monitoring
File Integrity Monitoring (FIM) with support for PCI, HIPAA, and GDPR compliance requirements, plus detection of new AWS regions, services, and EC2 instance types
Real-time Data Collection and Indexing
Collects and indexes machine-generated data from virtually any source or location in real time with immediate search and analysis capabilities.
Multi-deployment Visibility
Provides single-pane-of-glass visibility across on-premise and cloud deployments, enabling centralized monitoring across hybrid environments.
AWS Service Integration
Supports integration with AWS services including CloudTrail, Config, and VPC Flow Logs for comprehensive AWS environment monitoring.
Pre-built Application Support
Includes support for Splunk apps with pre-defined views for leading technologies such as Linux, Windows, and VMware.
FedRAMP Authorization
Maintains FedRAMP Moderate authorization for compliance with federal security standards.
Standard contract
No
No
No
Customer reviews
aarti y.
Live Tail and LogReduce Make Real-Time Troubleshooting Fast
Reviewed on Apr 07, 2026
Review provided by G2
What do you like best about the product?
Sumo Logic's Live Tail feature is something I use almost daily, being able to stream real-time logs during a deployment means I catch anomalies within seconds instead of waiting for an alert to fire. The LogReduce clustering has genuinely cut my incident investigation time in half by automatically grouping similar error patterns
What do you dislike about the product?
The dashboard building experience is where I feel the most friction, there's no drag-and-drop panel resizing, so arranging widgets into a clean layout takes far longer than it should and becomes a real time sink when you're iterating quickly during an incident review
What problems is the product solving and how is that benefiting you?
Before Sumo Logic, we struggled with fragmented observability, logs lived in CloudWatch, metrics in a separate tool, and correlating them during an incident meant switching contexts constantly, which easily added 20-30 minutes to every triage cycle.
Now we can investigate the full stack in a single unified interface, which has cut our mean time to resolution by roughly 40% and made on-call rotations significantly less stressful
Now we can investigate the full stack in a single unified interface, which has cut our mean time to resolution by roughly 40% and made on-call rotations significantly less stressful
Ján J.
Powerful Data Ingestion and Queries, but a Steep Learning Curve
Reviewed on Apr 03, 2026
Review provided by G2
What do you like best about the product?
One of Sumo’s strongest suits is its ability to ingest and normalize data from almost any source—AWS, Azure, GCP, or on-prem—into a single “pane of glass.” The query language is incredibly robust, and I use it every day for debugging.
What do you dislike about the product?
If you aren’t familiar with their specific syntax, it can take some time to become proficient. I’d suggest improving the “out-of-the-box” query builders to make it easier to get started. Also, when running complex queries over large time ranges (for example, 7+ days), the UI can sometimes feel sluggish or even time out.
What problems is the product solving and how is that benefiting you?
Sumo Logic acts as a Single Source of Truth. It unifies logs, metrics, and traces into one platform.
Steph W.
Real-Time Log Aggregation with a Powerful Query Language
Reviewed on Mar 27, 2026
Review provided by G2
What do you like best about the product?
What I like most is its ability to aggregate logs in real time, along with how powerful its query language is. It saves me a lot of preprocessing time and makes it easier to get to the insights I need without extra setup.
What do you dislike about the product?
The biggest problem is that you’re constantly worried about what you consume. It’s a constant source of stress having to monitor your data traffic so you don’t lose control of your budget.
What problems is the product solving and how is that benefiting you?
Sumo Logic performs wonderfully. It’s a super agile tool that lets me draw conclusions quickly, without the platform slowing down when I need it most.
Government Relations
Easy to Use and Master—No Steep Learning Curve
Reviewed on Mar 26, 2026
Review provided by G2
What do you like best about the product?
Easy to use and master and does not have learning curse like Splunk.
Customer support is great.
Customer support is great.
What do you dislike about the product?
It does not have solid SOAR features like Sentinel.
What problems is the product solving and how is that benefiting you?
The single pane of glass overview is nice and i can see it all at once
A lot of automation.
A lot of automation.
Tarek R.
LogReduce Cuts Through Thousands of Events for Faster, Data-Driven Decisions
Reviewed on Mar 25, 2026
Review provided by G2
What do you like best about the product?
What excites me most, honestly, is the LogReduce feature. It’s helped me cut through the noise across thousands of events, which feels essential when I’m trying to make decisions grounded in real data instead of assumptions.
What do you dislike about the product?
The downside is that the interface has a steep learning curve. It’s also important to be precise with the filters; otherwise, the budget can skyrocket.
What problems is the product solving and how is that benefiting you?
One of the biggest benefits is proactive visibility. Now I can pinpoint exactly what’s going wrong in the sales funnel thanks to the real-time dashboards, and this has dramatically accelerated our ability to respond to any operational issues.