Sumo Logic is a decent choice for log management and monitoring, especially in cloud-native environments. It’s easy to set up, scales well, and has useful built-in dashboards. Real-time monitoring and anomaly detection work well, but query performance can sometimes be slow, and the learning curve is there.

Sumo Logic has a query language that is easy to learn. It queries returns fast results. One of the many features of Sumo Logic is that it ingests logs from many different sources. It does have support for many data sources which reduces the time one would have to spend with any customization. When troubleshooting issues one can turn to Sumo Logic logs to investigate to norrow down what happened at a particular time. In my organisation we use Sumo Logic to ingest Active Directory logs and query for events relates to user(s) when investigating user activities.

Itegration and mining of application logs.