The speed of queries could be improved. When using more advanced functions, especially with large datasets like the 90-day log retention we had, queries could be slow, sometimes taking up to five minutes. Additionally, the management of searches definitely needs improvement. I often had many Sumo Logic tabs open—not browser tabs, but tabs within their system. It could easily become overwhelming, with multiple pages of tabs to keep track of. There is also a lack of pre-built dashboards. So, those are the three main areas where I see room for improvement.
Documentation could be better. While it's generally good, sometimes finding what you need requires extensive searching. It's not always clear where to look for specific things. Sometimes, the information itself is well-written, but you have to dig through multiple sources before finding it. It's not the most user-friendly experience, so I think documentation needs improvement for user needs.
Software and Systems Engineer at Ben Abrams Consulting
Real User
Top 20
Jan 11, 2024
We accumulate more systems, and they become more ephemeral. Consequently, this leads to an exponential increase in observability data. Therefore, it's crucial to continuously explore, employ, and refine techniques for efficiency in storage, querying, etc. These optimizations directly impact costs for both the vendor and the customer, particularly considering the exponential scale. Thus, cost management becomes paramount, with price per unit as a main factor. It's essential to strive for the lowest possible price per unit while maintaining the capabilities for innovative functionalities. One suggested improvement for Sumo Logic is implementing a more streamlined enrichment process, conceptualizing the observability data collection as an ETL pipeline. This would involve enhancing processing rules and FDR for a smoother experience, particularly when integrating with the SIEM product and performing further enrichments. Such enhancements would benefit security personnel and various other users, making enrichment a primary feature accessible to all.
Sumo Logic Observability offers advanced monitoring solutions with features like integrated dashboards and querying capabilities, though presents a learning curve compared to alternatives. Designed for efficient log aggregation and analysis, it provides near-real-time updates facilitating improved incident resolution. Sumo Logic Observability stands out with its ability to unify teams through a single platform, offering features that include customizable dashboards and valuable apps. It...
The speed of queries could be improved. When using more advanced functions, especially with large datasets like the 90-day log retention we had, queries could be slow, sometimes taking up to five minutes. Additionally, the management of searches definitely needs improvement. I often had many Sumo Logic tabs open—not browser tabs, but tabs within their system. It could easily become overwhelming, with multiple pages of tabs to keep track of. There is also a lack of pre-built dashboards. So, those are the three main areas where I see room for improvement.
Documentation could be better. While it's generally good, sometimes finding what you need requires extensive searching. It's not always clear where to look for specific things. Sometimes, the information itself is well-written, but you have to dig through multiple sources before finding it. It's not the most user-friendly experience, so I think documentation needs improvement for user needs.
We accumulate more systems, and they become more ephemeral. Consequently, this leads to an exponential increase in observability data. Therefore, it's crucial to continuously explore, employ, and refine techniques for efficiency in storage, querying, etc. These optimizations directly impact costs for both the vendor and the customer, particularly considering the exponential scale. Thus, cost management becomes paramount, with price per unit as a main factor. It's essential to strive for the lowest possible price per unit while maintaining the capabilities for innovative functionalities. One suggested improvement for Sumo Logic is implementing a more streamlined enrichment process, conceptualizing the observability data collection as an ETL pipeline. This would involve enhancing processing rules and FDR for a smoother experience, particularly when integrating with the SIEM product and performing further enrichments. Such enhancements would benefit security personnel and various other users, making enrichment a primary feature accessible to all.
Fine-grained data can be quite frustrating to work with and should be made easier.