Ability to collate logs from VMs across cloud providers and search for issues. Ability to setup alerts based on exceptions/errors in the log and wide variety of integration mechanism to deliver the alerts

Sumo Logic is really putting Security at the forefront of product enhancements. Integration with a variety of AWS services, G Suite, Okta, and their partnership with CrowdStrike have provided great visibility into our threat landscape. Field extraction rules, partitions, and data forward allow Information Security personnel to effectively search for information across various data sources in a consistent manner.

I like the relative ease of getting started writing queries. You can certainly get quite complex with your queries, but to start you can create very simple queries that correspond to a specific log. Also, SumoLogic provides very in depth tutorials.