Pricing Login
Pricing

One platform.
Flexible pricing.

Any scale.

  • Always free account
  • Unlimited users
  • Free training & certification
Sumo Logic Platform Pricing

View pricing in

Partner pricing: Contact us

Break down silos with a modern log management solution to improve monitoring and troubleshooting, increase security posture, and gain key business insights.

Key features:

  • Secure, compliant platform
  • Unlimited queries
  • Historical & live streaming dashboards
  • Real-time alerts
  • Log Reduce for immediate key insight analytics
  • 1-click integrations with AWS, Azure, & GCP
  • Standard support

Available as part of the following subscription packages (pricing varies by package): Enterprise Suite, Enterprise Security, Enterprise Operations, Essentials

*The price per GB is calculated assuming Customer purchases: (1) an annual commitment to Sumo Logic Essentials; (2) ingesting an average of 1GB of log ingest per day; and (3) election of a US Deployment Region. Pricing may vary based on Deployment Region selected by Customer.

Reduce downtime and solve customer-impacting issues faster with an integrated observability platform for all application data.

Example Host Pricing: $13.75/Host/Month**

Key features:

  • Integrations with applications for rapid deployment
  • Unified platform for full stack coverage
  • Standard and custom metric support included
  • Real-time alerts
  • Machine learning algorithms reducing alert fatigue
  • Live process monitoring
  • Standard support

Available as part of the following subscription packages (pricing varies by package): Enterprise Suite, Enterprise Security, Enterprise Operations, Essentials

*The per 1000 DPM is calculated assuming Customer purchases: (1) an annual commitment to Sumo Logic Essentials; (2) ingesting an average of 1,000 DPM per day; and (3) election of a US Deployment Region. Pricing may vary based on Deployment Region selected by Customer.

**The Monthly Price Per Host is calculated assuming Customer purchases: (1) an annual commitment to Sumo Logic Essentials; (2) ingesting an average of 1,000 DPM per day per Host per month; and (3) election of a US Deployment Region. Pricing may vary based on Deployment Region selected by Customer. For clarity, a "Host" means a single virtual machine with a single operating system (OS) instance.

Enrich and analyze traces, logs, and metrics in real-time with automatically generated application topology.

Example Host Pricing: Approximately $32/Host/Month**

Key features:

  • Multi-dimensional clearly showing both spans and traces separately
  • Ingest any distributed trace telemetry
  • Support for all open telemetry standards
  • Instantly drill directly into logs or metrics for deeper analysis
  • Machine learning algorithms reducing alert fatigue
  • Live service graph mapping
  • Standard support

Available as part of the following subscription packages (pricing varies by package): Enterprise Suite, Enterprise Operations, Essentials

*The Price Per GB is calculated assuming Customer purchases: (1) an annual commitment to Sumo Logic Essentials; (2) ingesting an average of 1GB of tracing data per day; and (3) election of a US Deployment Region. Pricing may vary based on Deployment Region selected by Customer.

**The Monthly Price Per Host is calculated assuming Customer purchases: (1) an annual commitment to Sumo Logic Essentials; (2) ingesting an average of tracing GB data based on 130 Request Per Minute per Host per month; and (3) election of a US Deployment Region. Pricing may vary based on Deployment Region selected by Customer. For clarity, a "Host" means a single virtual machine with a single operating system (OS) instance, and "Request Per Minute" means tracing spans with an estimated size of 1000 bytes per span.

Protect your cloud environments and stay ahead of the evolving threat landscape.

Key features:

  • Centrally ingest, store, and search all security logs and event data in a security data lake that's also FedRAMP Moderate authorized
  • Quickly and easily demonstrate security best practices and compliance readiness for PCI and other security regulations
  • Monitor, alert, and analyze data in real-time across all security tools, cloud infrastructures, and SaaS applications to quickly investigate and respond to cyber threats
  • Full application stack visibility and continuous monitoring across entire CI/CD lifecycle for securing modern, cloud-native applications
  • 24/7 Enterprise Support

Available as part of the following subscription packages (pricing varies by package): Enterprise Suite, Enterprise Security, Enterprise Operations, Essentials

Speed up incident investigations by automatically triaging alerts and correlating threats across on-prem, cloud and hybrid cloud sources.

Key features:

  • Streamlined workflows automatically triage alerts to maximize security analyst efficiency and focus
  • Correlate & detect threats across your on-prem, cloud, multi-cloud, and hybrid cloud environments
  • Security signals are tagged with the tactic and technique related to the MITRE ATT&CK framework using out-of-the-box rules content
  • Detect advanced threats and low & slow attacks, as well as higher speed direct threats
  • Deep library of cloud API integrations can pull security telemetry directly from sources such as VMware Carbon Black, Okta, AWS GuardDuty, and Office 365
  • Save on average four hours per threat investigation while reducing false positives
  • 24/7 Enterprise Support

Available as part of the following subscription packages (pricing varies by package): Enterprise Suite, Enterprise Security

Limit false positives and reduce duplicate events by leveraging machine learning.

Key features:

  • Connect disparate tools to fully automate incident response and leave time-consuming, manual tasks behind
  • Playbooks highlight appropriate courses of action, reducing the time needed to remediate incidents
  • Automation of the full incident lifecycle eases the burden on security analysts
  • Quickly assemble highly customizable reports and dashboards to easily navigate and assess your security intelligence portfolio
  • Automated workflow processes help analysts function at an optimal level and reduce the skills gap
  • Connective tissue between your existing tools to automate processes across the SOC and derive relevant insights throughout your security portfolio
  • 24/7 Enterprise Support

Available as part of the following subscription packages (pricing varies by package): Enterprise Suite

Log Analytics

Plan Details plan details arrow

Break down silos with a modern log management solution to improve monitoring and troubleshooting, increase security posture, and gain key business insights.

Key features:

  • Secure, compliant platform
  • Unlimited queries
  • Historical & live streaming dashboards
  • Real-time alerts
  • Log Reduce for immediate key insight analytics
  • 1-click integrations with AWS, Azure, & GCP
  • Standard support

Available as part of the following subscription packages (pricing varies by package): Enterprise Suite, Enterprise Security, Enterprise Operations, Essentials

Starting at $3.00/GB*

*The price per GB is calculated assuming Customer purchases: (1) an annual commitment to Sumo Logic Essentials; (2) ingesting an average of 1GB of log ingest per day; and (3) election of a US Deployment Region. Pricing may vary based on Deployment Region selected by Customer.

Infrastructure Monitoring

Plan Details plan details arrow

Reduce downtime and solve customer-impacting issues faster with an integrated observability platform for all application data.

Example Host Pricing: $13.75/Host/Month**

Key features:

  • Integrations with applications for rapid deployment
  • Unified platform for full stack coverage
  • Standard and custom metric support included
  • Real-time alerts
  • Machine learning algorithms reducing alert fatigue
  • Live process monitoring
  • Standard support

Available as part of the following subscription packages (pricing varies by package): Enterprise Suite, Enterprise Security, Enterprise Operations, Essentials

Starting at $0.45/1000 DPM daily average*

*The per 1000 DPM is calculated assuming Customer purchases: (1) an annual commitment to Sumo Logic Essentials; (2) ingesting an average of 1,000 DPM per day; and (3) election of a US Deployment Region. Pricing may vary based on Deployment Region selected by Customer.

**The Monthly Price Per Host is calculated assuming Customer purchases: (1) an annual commitment to Sumo Logic Essentials; (2) ingesting an average of 1,000 DPM per day per Host per month; and (3) election of a US Deployment Region. Pricing may vary based on Deployment Region selected by Customer. For clarity, a "Host" means a single virtual machine with a single operating system (OS) instance.

Application Observability

Plan Details plan details arrow

Enrich and analyze traces, logs, and metrics in real-time with automatically generated application topology.

Example Host Pricing: Approximately $32/Host/Month**

Key features:

  • Multi-dimensional clearly showing both spans and traces separately
  • Ingest any distributed trace telemetry
  • Support for all open telemetry standards
  • Instantly drill directly into logs or metrics for deeper analysis
  • Machine learning algorithms reducing alert fatigue
  • Live service graph mapping
  • Standard support

Available as part of the following subscription packages (pricing varies by package): Enterprise Suite, Enterprise Operations, Essentials

Starting at $2.10/GB*

*The Price Per GB is calculated assuming Customer purchases: (1) an annual commitment to Sumo Logic Essentials; (2) ingesting an average of 1GB of tracing data per day; and (3) election of a US Deployment Region. Pricing may vary based on Deployment Region selected by Customer.

**The Monthly Price Per Host is calculated assuming Customer purchases: (1) an annual commitment to Sumo Logic Essentials; (2) ingesting an average of tracing GB data based on 130 Request Per Minute per Host per month; and (3) election of a US Deployment Region. Pricing may vary based on Deployment Region selected by Customer. For clarity, a "Host" means a single virtual machine with a single operating system (OS) instance, and "Request Per Minute" means tracing spans with an estimated size of 1000 bytes per span.

Cloud Security Analytics

Plan Details plan details arrow

Protect your cloud environments and stay ahead of the evolving threat landscape.

Key features:

  • Centrally ingest, store, and search all security logs and event data in a security data lake that's also FedRAMP Moderate authorized
  • Quickly and easily demonstrate security best practices and compliance readiness for PCI and other security regulations
  • Monitor, alert, and analyze data in real-time across all security tools, cloud infrastructures, and SaaS applications to quickly investigate and respond to cyber threats
  • Full application stack visibility and continuous monitoring across entire CI/CD lifecycle for securing modern, cloud-native applications
  • 24/7 Enterprise Support

Available as part of the following subscription packages (pricing varies by package): Enterprise Suite, Enterprise Security, Enterprise Operations, Essentials

Contact Sales

Cloud SIEM

Plan Details plan details arrow

Speed up incident investigations by automatically triaging alerts and correlating threats across on-prem, cloud and hybrid cloud sources.

Key features:

  • Streamlined workflows automatically triage alerts to maximize security analyst efficiency and focus
  • Correlate & detect threats across your on-prem, cloud, multi-cloud, and hybrid cloud environments
  • Security signals are tagged with the tactic and technique related to the MITRE ATT&CK framework using out-of-the-box rules content
  • Detect advanced threats and low & slow attacks, as well as higher speed direct threats
  • Deep library of cloud API integrations can pull security telemetry directly from sources such as VMware Carbon Black, Okta, AWS GuardDuty, and Office 365
  • Save on average four hours per threat investigation while reducing false positives
  • 24/7 Enterprise Support

Available as part of the following subscription packages (pricing varies by package): Enterprise Suite, Enterprise Security

Contact Sales

Cloud SOAR

Plan Details plan details arrow

Limit false positives and reduce duplicate events by leveraging machine learning.

Key features:

  • Connect disparate tools to fully automate incident response and leave time-consuming, manual tasks behind
  • Playbooks highlight appropriate courses of action, reducing the time needed to remediate incidents
  • Automation of the full incident lifecycle eases the burden on security analysts
  • Quickly assemble highly customizable reports and dashboards to easily navigate and assess your security intelligence portfolio
  • Automated workflow processes help analysts function at an optimal level and reduce the skills gap
  • Connective tissue between your existing tools to automate processes across the SOC and derive relevant insights throughout your security portfolio
  • 24/7 Enterprise Support

Available as part of the following subscription packages (pricing varies by package): Enterprise Suite

Contact Sales

Licensing designed for unlimited choice, flexibility, and value

Not all data is created equal, and that's why we give you the flexibility to make that choice through the Sumo Logic licensing model including tiering and credits.

By only paying for the data being managed, your team gains the ability to key in on the most critical insights, eliminating budget waste in the process.

Edition Configurations
Tiered data analytics
Log capacity
Metrics capacity
Tracing capacity
Log data retention
Real-time alerting (monitors Logs/Metrics)
Global Intelligence
PCI, SOC, CSA, ISO, HIPAA certifications
Support
Premium support
Observability
Application Observability
Cloud Log Management
Infrastructure Monitoring
Multi-Cloud Observability (AWS, Azure, GCP)
Real User Monitoring (RUM)
Security
Cloud Security Analytics
Cloud SIEM
Cloud SOAR
Security Audit and Compliance
Platform Capabilities
Accelerated Application Integrations (Slack, PagerDuty, AWS Lambda, Service Now, etc.)
Alert Response
CrowdStrike threat intelligence
Enterprise audit logging & dashboards
GEO/IP lookups
Historical and live streaming dashboards
Ingest budgets
Live tail for streaming logs
LogReduce®, LogCompare, & Log Explain
Lookup tables
Management APIs (avail per feature)
PCI compliance integration
Predictive analytics and outlier detection
Root Cause Explorer
Software Development Optimization
Search API
Search and visualizations
Single sign-on with SAML
Sumo Logic applications
Tracing Search Query Support
Continuous
Limited up to 1GB/day**
Limited up to 3,000 DPM/day**
Limited up to 1.5GB/day**
7 days
50/50
Community

Essentials

Start Trial
Continuous
Unlimited
Up to 50,000 DPM
Up to 5GB/day
Up to 365 days
300/500
Platform Security
Standard (8x5)

Enterprise Operations

Start Trial
Continuous
Unlimited
Unlimited
Unlimited
Customer defined
1000/1500
Operational Insights
Platform Security
Enterprise (P1 24/7)
Optional

Enterprise Security

Start Trial
Continuous
Unlimited
Unlimited
Not available
Customer defined
1000/1500
Security Insights
Platform Security
Enterprise (P1 24/7)
Optional
Minimum requirements***

Enterprise Suite

Contact Sales
Continuous, Frequent & Infrequent
Unlimited
Unlimited
Unlimited
Customer defined
1000/1500
Operational & Security Insights
Platform Security
Enterprise (P1 24/7)
Optional
Minimum requirements***
Minimum requirements***

Package subscription cost vary based on specific subscription configuration details. "Unlimited" indicates there is no limit on volume that can be quoted; however, fees will vary based volume quoted

**Note: Capacity varies and is limited by overall configuration of Logs, Metrics, and Tracing. Individual capacity references listed are only possible if other ingest configurations are not utilized.

*** Note: Feature activation subject to minimum volume and service requirements confirmed at time of transaction.

Frequently asked questions

Is Cloud Flex Credits tracking real time or is there a 24-hour delay?

Tracking is real time. The Sumo Logic platform constantly tracks credit utilization as it happens. You immediately see the impact of your product usage and immediately see any significant spikes. There is no artificial 24-hour delay that impacts your ability to manage your account. You see it as it happens so there are no surprises.

Do you charge for demand spikes, or charge penalties for increased use?

No. With Cloud Flex Credits, Sumo Logic does not charge after the fact for any ingest spike or increased usage at penalty rates. Unlike other market options, you do not need to pay or provision for peaks. You will never get surprised with on-demand/overage bills. Your credit utilization simply reflects the product used for that specific time.

What is a credit?

A credit is a unit of measure that is used to flexibly pay against use of any products (logs, metrics, storage, etc.) within a service agreement plan. As product variables are processed in the platform, credits are recorded in the account management console.


Credits reflect the platform utilization by product variable on a daily, weekly, or monthly basis, and updated in the system in real time. Each product variable tracks to a pre-defined number of credits per event (20 credits per GB ingested for search, real-time alerts and dashboards, etc.). On an Essentials package, 20 credits of a GB ingested costs $3.00/GB list price (annual commitment on a US deployment).


Credits are licensed as part of the agreement in annual buckets, and you can choose how best to configure the platform to maximize your ROI by optimizing ingest and use case patterns.

What is a DPM?

For billing and reporting purposes, data volume for metrics is measured in Data Points per Minute (DPM). DPM is defined as the average number of metric data points ingested per minute in one thousand increments. The per minute ingest is then averaged for a calendar day to get the average data points per minute for that day. The daily DPM average in one thousand increments is the unit of measure used to track metric ingestion for reporting and licensing within the Sumo Logic Continuous Intelligence Platform.

Do I have to limit the performance by pushing data to older or less efficient compute processing to increase ROI?

No. You did not need to trade off price for performance. The model provides tiered economics allowing you to optimize data analytics as you see fit with no dependency on hardware. All Sumo Logic Tiers are built on the same industry leading Continuous Intelligence Platform™, and they are designed to maximize performance for ingest and query response.

What happens at the end of a 30-day free trial?

At the end of the trial period, all trial accounts revert to a Sumo Logic Free account.

Will I be billed after the free trial?

After the trial period, all trials revert to the Sumo Logic Free account. To continue utilizing the full functionality of the Continuous Intelligence Platform™, simply purchase from within the Sumo Logic admin interface or contact the Sumo Logic sales team.

How much data volume do I get allocated during my 30-day trial?

The default data volume setting during the 30-day trial is 1GB/day for log ingest, 50,000 DPM for metric observability, and 1 GB/day for distributed tracing. For complex proof of concept pilots of the Sumo Logic Continuous Intelligence Platform™, you can always contact the sales team to increase the data volume for your trial.

Do you provide 24x7 technical support?

Yes, 24×7 Priority 1 Technical Support is included in the Enterprise Operations, Enterprise Security and Enterprise Suite.

Not sure which plan fits you?

Set up a chat with one of our customer reps to help find a plan that’s right for you.