One platform.
Flexible pricing.

Any scale.

Get a demo Browse plans

Always free account
Unlimited users
Free training & certification

View pricing in

Partner pricing: Contact us

Log Analytics

Starting at $3.00/GB*

Break down silos with a modern log management solution to improve monitoring and troubleshooting, increase security posture, and gain key business insights.

Key features:

Secure, compliant platform
Unlimited queries
Historical & live streaming dashboards
Real-time alerts
Log Reduce for immediate key insight analytics
1-click integrations with AWS, Azure, & GCP
Standard support

Available as part of the following subscription packages (pricing varies by package): Enterprise Suite, Enterprise Security, Enterprise Operations, Essentials

*The price per GB is calculated assuming Customer purchases: (1) an annual commitment to Sumo Logic Essentials; (2) ingesting an average of 1GB of log ingest per day; and (3) election of a US Deployment Region. Pricing may vary based on Deployment Region selected by Customer.

Contact Sales Start Free

Cloud Security Analytics

Contact Sales

Protect your cloud environments and stay ahead of the evolving threat landscape.

Key features:

Centrally ingest, store, and search all security logs and event data in a security data lake that's also FedRAMP Moderate authorized
Quickly and easily demonstrate security best practices and compliance readiness for PCI and other security regulations
Monitor, alert, and analyze data in real-time across all security tools, cloud infrastructures, and SaaS applications to quickly investigate and respond to cyber threats
Full application stack visibility and continuous monitoring across entire CI/CD lifecycle for securing modern, cloud-native applications
24/7 Enterprise Support

Available as part of the following subscription packages (pricing varies by package): Enterprise Suite, Enterprise Security, Enterprise Operations, Essentials

Contact Sales Start Free

Infrastructure Monitoring

Starting at $0.45/1000 DPM daily average*

Reduce downtime and solve customer-impacting issues faster with an integrated observability platform for all application data.

Example Host Pricing: $13.75/Host/Month**

Key features:

Integrations with applications for rapid deployment
Unified platform for full stack coverage
Standard and custom metric support included
Real-time alerts
Machine learning algorithms reducing alert fatigue
Live process monitoring
Standard support

Available as part of the following subscription packages (pricing varies by package): Enterprise Suite, Enterprise Security, Enterprise Operations, Essentials

*The per 1000 DPM is calculated assuming Customer purchases: (1) an annual commitment to Sumo Logic Essentials; (2) ingesting an average of 1,000 DPM per day; and (3) election of a US Deployment Region. Pricing may vary based on Deployment Region selected by Customer.

**The Monthly Price Per Host is calculated assuming Customer purchases: (1) an annual commitment to Sumo Logic Essentials; (2) ingesting an average of 1,000 DPM per day per Host per month; and (3) election of a US Deployment Region. Pricing may vary based on Deployment Region selected by Customer. For clarity, a "Host" means a single virtual machine with a single operating system (OS) instance.

Contact Sales Start Free

Cloud SIEM

Contact Sales

Speed up incident investigations by automatically triaging alerts and correlating threats across on-prem, cloud and hybrid cloud sources.

Key features:

Streamlined workflows automatically triage alerts to maximize security analyst efficiency and focus
Correlate & detect threats across your on-prem, cloud, multi-cloud, and hybrid cloud environments
Security signals are tagged with the tactic and technique related to the MITRE ATT&CK framework using out-of-the-box rules content
Detect advanced threats and low & slow attacks, as well as higher speed direct threats
Deep library of cloud API integrations can pull security telemetry directly from sources such as VMware Carbon Black, Okta, AWS GuardDuty, and Office 365
Save on average four hours per threat investigation while reducing false positives
24/7 Enterprise Support

Available as part of the following subscription packages (pricing varies by package): Enterprise Suite, Enterprise Security

Contact Sales

Application Observability

Starting at $2.10/GB*

Enrich and analyze traces, logs, and metrics in real-time with automatically generated application topology.

Example Host Pricing: Approximately $32/Host/Month**

Key features:

Multi-dimensional clearly showing both spans and traces separately
Ingest any distributed trace telemetry
Support for all open telemetry standards
Instantly drill directly into logs or metrics for deeper analysis
Machine learning algorithms reducing alert fatigue
Live service graph mapping
Standard support

Available as part of the following subscription packages (pricing varies by package): Enterprise Suite, Enterprise Operations, Essentials

*The Price Per GB is calculated assuming Customer purchases: (1) an annual commitment to Sumo Logic Essentials; (2) ingesting an average of 1GB of tracing data per day; and (3) election of a US Deployment Region. Pricing may vary based on Deployment Region selected by Customer.

**The Monthly Price Per Host is calculated assuming Customer purchases: (1) an annual commitment to Sumo Logic Essentials; (2) ingesting an average of tracing GB data based on 130 Request Per Minute per Host per month; and (3) election of a US Deployment Region. Pricing may vary based on Deployment Region selected by Customer. For clarity, a "Host" means a single virtual machine with a single operating system (OS) instance, and "Request Per Minute" means tracing spans with an estimated size of 1000 bytes per span.

Contact Sales Start Free

Cloud SOAR

Contact Sales

Limit false positives and reduce duplicate events by leveraging machine learning.

Key features:

Connect disparate tools to fully automate incident response and leave time-consuming, manual tasks behind
Playbooks highlight appropriate courses of action, reducing the time needed to remediate incidents
Automation of the full incident lifecycle eases the burden on security analysts
Quickly assemble highly customizable reports and dashboards to easily navigate and assess your security intelligence portfolio
Automated workflow processes help analysts function at an optimal level and reduce the skills gap
Connective tissue between your existing tools to automate processes across the SOC and derive relevant insights throughout your security portfolio
24/7 Enterprise Support

Available as part of the following subscription packages (pricing varies by package): Enterprise Suite

Contact Sales

Log Analytics

Plan Details

Break down silos with a modern log management solution to improve monitoring and troubleshooting, increase security posture, and gain key business insights.

Key features:

Secure, compliant platform
Unlimited queries
Historical & live streaming dashboards
Real-time alerts
Log Reduce for immediate key insight analytics
1-click integrations with AWS, Azure, & GCP
Standard support

Available as part of the following subscription packages (pricing varies by package): Enterprise Suite, Enterprise Security, Enterprise Operations, Essentials

Starting at $3.00/GB*

Contact Sales Start Free

Cloud Security Analytics

Plan Details

Protect your cloud environments and stay ahead of the evolving threat landscape.

Key features:

Centrally ingest, store, and search all security logs and event data in a security data lake that's also FedRAMP Moderate authorized
Quickly and easily demonstrate security best practices and compliance readiness for PCI and other security regulations
Monitor, alert, and analyze data in real-time across all security tools, cloud infrastructures, and SaaS applications to quickly investigate and respond to cyber threats
Full application stack visibility and continuous monitoring across entire CI/CD lifecycle for securing modern, cloud-native applications
24/7 Enterprise Support

Available as part of the following subscription packages (pricing varies by package): Enterprise Suite, Enterprise Security, Enterprise Operations, Essentials

Contact Sales

Contact Sales Start Free

Infrastructure Monitoring

Plan Details

Reduce downtime and solve customer-impacting issues faster with an integrated observability platform for all application data.

Example Host Pricing: $13.75/Host/Month**

Key features:

Integrations with applications for rapid deployment
Unified platform for full stack coverage
Standard and custom metric support included
Real-time alerts
Machine learning algorithms reducing alert fatigue
Live process monitoring
Standard support

Available as part of the following subscription packages (pricing varies by package): Enterprise Suite, Enterprise Security, Enterprise Operations, Essentials

Starting at $0.45/1000 DPM daily average*

Contact Sales Start Free

Cloud SIEM

Plan Details

Speed up incident investigations by automatically triaging alerts and correlating threats across on-prem, cloud and hybrid cloud sources.

Key features:

Streamlined workflows automatically triage alerts to maximize security analyst efficiency and focus
Correlate & detect threats across your on-prem, cloud, multi-cloud, and hybrid cloud environments
Security signals are tagged with the tactic and technique related to the MITRE ATT&CK framework using out-of-the-box rules content
Detect advanced threats and low & slow attacks, as well as higher speed direct threats
Deep library of cloud API integrations can pull security telemetry directly from sources such as VMware Carbon Black, Okta, AWS GuardDuty, and Office 365
Save on average four hours per threat investigation while reducing false positives
24/7 Enterprise Support

Available as part of the following subscription packages (pricing varies by package): Enterprise Suite, Enterprise Security

Contact Sales

Application Observability

Plan Details

Enrich and analyze traces, logs, and metrics in real-time with automatically generated application topology.

Example Host Pricing: Approximately $32/Host/Month**

Key features:

Multi-dimensional clearly showing both spans and traces separately
Ingest any distributed trace telemetry
Support for all open telemetry standards
Instantly drill directly into logs or metrics for deeper analysis
Machine learning algorithms reducing alert fatigue
Live service graph mapping
Standard support

Available as part of the following subscription packages (pricing varies by package): Enterprise Suite, Enterprise Operations, Essentials

Starting at $2.10/GB*

Contact Sales Start Free

Cloud SOAR

Plan Details

Limit false positives and reduce duplicate events by leveraging machine learning.

Key features:

Connect disparate tools to fully automate incident response and leave time-consuming, manual tasks behind
Playbooks highlight appropriate courses of action, reducing the time needed to remediate incidents
Automation of the full incident lifecycle eases the burden on security analysts
Quickly assemble highly customizable reports and dashboards to easily navigate and assess your security intelligence portfolio
Automated workflow processes help analysts function at an optimal level and reduce the skills gap
Connective tissue between your existing tools to automate processes across the SOC and derive relevant insights throughout your security portfolio
24/7 Enterprise Support

Available as part of the following subscription packages (pricing varies by package): Enterprise Suite

Contact Sales

Tiered data analytics

Log capacity

Metrics capacity

Tracing capacity

Log data retention

Real-time alerting (monitors Logs/Metrics)

Global Intelligence

PCI, SOC, CSA, ISO, HIPAA certifications

Support

Premium support

Application Observability

Cloud Log Management

Infrastructure Monitoring

Multi-Cloud Observability (AWS, Azure, GCP)

Real User Monitoring (RUM)

Cloud Security Analytics

Cloud SIEM

Cloud SOAR

Security Audit and Compliance

Accelerated Application Integrations (Slack, PagerDuty, AWS Lambda, Service Now, etc.)

Alert Response

CrowdStrike threat intelligence

Enterprise audit logging & dashboards

GEO/IP lookups

Historical and live streaming dashboards

Ingest budgets

Live tail for streaming logs

LogReduce®, LogCompare, & Log Explain

Lookup tables

Management APIs (avail per feature)

PCI compliance integration

Predictive analytics and outlier detection

Root Cause Explorer

Software Development Optimization

Search API

Search and visualizations

Single sign-on with SAML

Sumo Logic applications

Tracing Search Query Support

Continuous

Limited up to 1GB/day**

Limited up to 3,000 DPM/day**

Limited up to 1.5GB/day**

7 days

50/50

Community

Continuous

Unlimited

Up to 50,000 DPM

Up to 5GB/day

Up to 365 days

300/500

Platform Security

Standard (8x5)

Continuous

Unlimited

Customer defined

1000/1500

Operational Insights

Platform Security

Enterprise (P1 24/7)

Optional

Continuous

Unlimited

Not available

Customer defined

1000/1500

Security Insights

Platform Security

Enterprise (P1 24/7)

Optional

Minimum requirements***

Continuous, Frequent & Infrequent

Unlimited

Customer defined

1000/1500

Operational & Security Insights

Platform Security

Enterprise (P1 24/7)

Optional

Minimum requirements***

Minimum requirements****

Package subscription cost vary based on specific subscription configuration details. "Unlimited" indicates there is no limit on volume that can be quoted; however, fees will vary based volume quoted

**Note: Capacity varies and is limited by overall configuration of Logs, Metrics, and Tracing. Individual capacity references listed are only possible if other ingest configurations are not utilized.

*** Note: Feature activation subject to minimum volume and service requirements confirmed at time of transaction.

**** Feature activation subject to minimum number of users, and service requirements confirmed at time of transaction.

Is Cloud Flex Credits tracking real time or is there a 24-hour delay?

Tracking is real time. The Sumo Logic platform constantly tracks credit utilization as it happens. You immediately see the impact of your product usage and immediately see any significant spikes. There is no artificial 24-hour delay that impacts your ability to manage your account. You see it as it happens so there are no surprises.

Do you charge for demand spikes, or charge penalties for increased use?

No. With Cloud Flex Credits, Sumo Logic does not charge after the fact for any ingest spike or increased usage at penalty rates. Unlike other market options, you do not need to pay or provision for peaks. You will never get surprised with on-demand/overage bills. Your credit utilization simply reflects the product used for that specific time.

What is a credit?

A credit is a unit of measure that is used to flexibly pay against use of any products (logs, metrics, storage, etc.) within a service agreement plan. As product variables are processed in the platform, credits are recorded in the account management console.

Credits reflect the platform utilization by product variable on a daily, weekly, or monthly basis, and updated in the system in real time. Each product variable tracks to a pre-defined number of credits per event (20 credits per GB ingested for search, real-time alerts and dashboards, etc.). On an Essentials package, 20 credits of a GB ingested costs $3.00/GB list price (annual commitment on a US deployment).

Credits are licensed as part of the agreement in annual buckets, and you can choose how best to configure the platform to maximize your ROI by optimizing ingest and use case patterns.

What is a DPM?

For billing and reporting purposes, data volume for metrics is measured in Data Points per Minute (DPM). DPM is defined as the average number of metric data points ingested per minute in one thousand increments. The per minute ingest is then averaged for a calendar day to get the average data points per minute for that day. The daily DPM average in one thousand increments is the unit of measure used to track metric ingestion for reporting and licensing within the Sumo Logic Continuous Intelligence Platform.

Do I have to limit the performance by pushing data to older or less efficient compute processing to increase ROI?

No. You did not need to trade off price for performance. The model provides tiered economics allowing you to optimize data analytics as you see fit with no dependency on hardware. All Sumo Logic Tiers are built on the same industry leading Continuous Intelligence Platform™, and they are designed to maximize performance for ingest and query response.

What happens at the end of a 30-day free trial?

At the end of the trial period, all trial accounts revert to a Sumo Logic Free account.

Will I be billed after the free trial?

After the trial period, all trials revert to the Sumo Logic Free account. To continue utilizing the full functionality of the Continuous Intelligence Platform™, simply purchase from within the Sumo Logic admin interface or contact the Sumo Logic sales team.

How much data volume do I get allocated during my 30-day trial?

The default data volume setting during the 30-day trial is 1GB/day for log ingest, 50,000 DPM for metric observability, and 1 GB/day for distributed tracing. For complex proof of concept pilots of the Sumo Logic Continuous Intelligence Platform™, you can always contact the sales team to increase the data volume for your trial.

Do you provide 24x7 technical support?

Yes, 24×7 Priority 1 Technical Support is included in the Enterprise Operations, Enterprise Security and Enterprise Suite.

One platform.
Flexible pricing.

Any scale.

Key features:

Key features:

Key features:

Key features:

Key features:

Key features:

Log Analytics

Key features:

Cloud Security Analytics

Key features:

Infrastructure Monitoring

Key features:

Cloud SIEM

Key features:

Application Observability

Key features:

Cloud SOAR

Key features:

Frequently asked questions

Not sure which plan fits you?

One platform.Flexible pricing.

Any scale.

Log Analytics

Cloud Security Analytics

Infrastructure Monitoring

Cloud SIEM

Application Observability

Cloud SOAR

Frequently asked questions

Not sure which plan fits you?

You're in good company

One platform.
Flexible pricing.