CISO Tribune

Vendor comparison · 2 companies

Splunk vs Sumo Logic

Splunk sells a data platform for security, observability, and AI, and says the platform unifies petabyte-scale machine data wherever it lives. Sumo Logic sells a platform that combines telemetry pipeline control, log analytics, SIEM and DojoAI agents. CISO Tribune files both under SIEM and Security data lakes and pipelines. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Splunk
  • Sumo Logic
Splunk vs Sumo Logic: Products, Customers and Funding Compared
SplunkSplunk sells a data platform for security, observability, and AI, and says the platform unifies petabyte-scale machine data wherever it lives.splunk.comSumo LogicSumo Logic sells a platform that combines telemetry pipeline control, log analytics, SIEM and DojoAI agents.sumologic.com
What it sells
  • Splunk Cloud Platform[12][22][23][24]A platform to collect, index, and visualize data in the cloud.
  • Splunk Enterprise[1][12][14][17][18][22][24]A platform to collect, index, and visualize data using an on-premises engine.
  • Splunk Enterprise Security[1][14][17][18]A Splunk solution for security operations.
  • Federated Search[15][19]A search layer across the data estate.
  • Splunk AI Assistant[19]A natural-language entry point to the search workflow.
  • Splunk Edge Processor[21]A processor that applies cryptographic functions to data as it flows on-premises.
  • Splunk AI Toolkit[20]Guided workflows to build and deploy models.
  • Splunk Log Observer Connect[22]An integration that links logs to Splunk Observability Cloud.
  • Sumo Logic SIEM[8][14]Sumo Logic SIEM gives security analysts and SOC managers visibility across the enterprise.
  • Cloud SOAR[4][9]Cloud SOAR delivers SOAR functionality in private cloud, single cloud, multi-cloud or hybrid cloud environments.
  • Sumo Logic DojoAI[10]Sumo Logic DojoAI puts agentic AI to work across security and cloud operations.
  • Logs for Security[2][4][11]Logs for Security collects and analyzes cloud-specific logs.
Categories
Headquarters
San Jose, United States[4]Redwood City, United States[3]
Founded
2003[3]Not stated on its pages
Ownership and funding
Owned by Cisco[2][15][16][25]Owned by Francisco Partners since 2023[1][4][5][9][13][19]
Named customers
Not stated on its pages
Recent news
  • September 15, 2026Cisco released Cisco AI POD for Splunk, which brings Splunk AI features to on-premises customers on Cisco infrastructure with NVIDIA computing.[10]
  • May 28, 2026Splunk reported that Cisco has completed its acquisition of Galileo, with plans to integrate Galileo technology into Splunk Observability.[25]
  • April 9, 2026Cisco agreed to buy AI observability startup Galileo Technologies to add its agent monitoring tools to the Splunk observability platform.[11]
  • February 18, 2026Splunk announced that its hosted AI models are generally available for Splunk Cloud Platform customers.[23]
  • January 16, 2026Splunk announced the release of Splunk Enterprise 10.2 and Splunk Cloud Platform 10.2.[24]
  • September 21, 2026Sumo Logic unveiled enhanced Data Pipelines, extending its platform into data pipeline management so customers can control the cost and value of their telemetry.[17]
  • May 21, 2026Sumo Logic announced an integration with the Claude Compliance API that gives security and compliance teams visibility into Claude usage within the platform.[16]
  • May 6, 2026Sumo Logic hired Jeremy Powell as its CISO and Ben Cody as Senior Vice President of Product Management.[18]
  • December 1, 2025Sumo Logic announced new DojoAI agents, including a SOC Analyst Agent, a Knowledge Agent and a Model Context Protocol server.[15]
G2 and Gartner Peer Insights
  • G2: listed, seen November 3, 2026[16]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Splunk sells mainly to organisations that want security, observability, and AI data on one platform. Splunk describes SOC teams that index authentication and firewall data for real-time detections. Splunk describes a healthcare organization that monitors logs from medical devices. Splunk offers material for CISOs and boards on priorities, budgeting, compliance, and success metrics. Splunk describes deployments on Splunk Enterprise and Splunk Cloud Platform.From its own pages, Sumo Logic sells to security analysts and SOC managers through its SIEM. Sumo Logic positions one package for small-to-medium-sized DevOps and SecOps teams requiring ad-hoc investigation and troubleshooting. Sumo Logic positions a different package for maturing security teams looking for real-time threat detection, investigation and response. Sumo Logic describes parent org controls for MSSP and other parent org admins managing child orgs. Sumo Logic says its Kubernetes solution works for any setup on premise, AWS, Azure and GCP.
Last verified
October 10, 2026November 2, 2026

Where they overlap

  • SIEM is the primary category of both Splunk and Sumo Logic; both are also filed under Security data lakes and pipelines.
  • Both are headquartered in the United States.

Where they differ, field by field

  • Splunk is also filed under SOAR and security automation.
  • Splunk lists Splunk Cloud Platform, Splunk Enterprise, Splunk Enterprise Security, Federated Search, Splunk AI Assistant and 3 more. Sumo Logic lists Sumo Logic SIEM, Cloud SOAR, Sumo Logic DojoAI and Logs for Security.
  • Splunk is headquartered in San Jose, United States. Sumo Logic is headquartered in Redwood City, United States.
  • Splunk was founded in 2003.
  • Splunk is owned by Cisco. Sumo Logic is owned by Francisco Partners, since 2023.
  • Splunk publicly names Carrefour, Intel, FINRA, Alaska Airlines and Honda of Alabama.

How they differ

CISO Tribune files Splunk under SIEM, SOAR and security automation, and Security data lakes and pipelines, with SIEM as its primary category. CISO Tribune files Sumo Logic under SIEM and Security data lakes and pipelines, also with SIEM as its primary category. Splunk sells Splunk Cloud Platform and Splunk Enterprise, which collect, index and visualize data in the cloud and on an on-premises engine, along with Splunk Enterprise Security and Federated Search. Sumo Logic sells Sumo Logic SIEM, Cloud SOAR, Sumo Logic DojoAI and Logs for Security.

Splunk is headquartered in San Jose, United States, was founded in 2003, and is owned by Cisco. Sumo Logic is headquartered in Redwood City, United States, and has been owned by Francisco Partners since 2023. Splunk publicly names Carrefour, Intel, FINRA, Alaska Airlines and Honda of Alabama as customers. Sumo Logic says thousands of enterprises trust it, and positions packages for small-to-medium-sized DevOps and SecOps teams and for maturing security teams.

On September 15, 2026, Cisco released Cisco AI POD for Splunk, which brings Splunk AI features to on-premises customers on Cisco infrastructure with NVIDIA computing. Splunk also reported on May 28, 2026 that Cisco had completed its acquisition of Galileo. On September 21, 2026, Sumo Logic unveiled enhanced Data Pipelines, extending its platform into data pipeline management. On May 21, 2026, Sumo Logic announced an integration with the Claude Compliance API.

What it sells: Splunk

What Splunk Cloud Platform does[12][22][23][24]
Splunk Cloud Platform is described as a way to collect, index, and visualize data in the cloud. Splunk says data can be brought in with agents, Splunk-supported integrations, and developer add-ons.
What Splunk Enterprise Security does[1][14][17][18]
Splunk names Splunk Enterprise Security among its solutions that use pre-written macros. Splunk describes AI Assistant in Security as available to cloud customers of Splunk Enterprise Security.
What Federated Search does[15][19]
Federated Search is described as the unifying search layer across the data estate. It covers Splunk-managed locations and supported customer-managed stores such as Amazon S3 and Snowflake.
What Splunk AI Assistant does[19]
Splunk AI Assistant provides a natural-language entry point to the search workflow. With Agent Mode enabled, an analyst can describe the investigation to perform instead of constructing each search.

What it sells: Sumo Logic

What Sumo Logic SIEM does[8][14]
Sumo Logic SIEM parses, maps and creates normalized records from structured and unstructured data. Sumo Logic UEBA baselines user and entity behavior. Detection-as-Code support helps security teams version and manage SIEM rules in GitHub.
What Cloud SOAR does[4][9]
In the War Room, security analysts get a complete, chronological and detailed picture of a specific incident process. Sumo Logic offers hundreds of out-of-the-box actions and playbooks.
What Sumo Logic DojoAI does[10]
Mobot lets users talk to their data in plain language. The SOC Analyst Agent automatically analyzes alerts, evaluates related activity and delivers an evidence-backed verdict. Sumo Logic MCP Server connects external AI clients to Log Analytics and SIEM.
What Logs for Security does[2][4][11]
Logs for Security integrates logs from AWS, Google Cloud and Azure. Sumo Logic offers pre-built PCI compliance dashboards.

Questions about Splunk and Sumo Logic

What do Splunk and Sumo Logic sell?
Splunk sells Splunk Cloud Platform, Splunk Enterprise, Splunk Enterprise Security, Federated Search, Splunk AI Assistant and 3 more. Sumo Logic sells Sumo Logic SIEM, Cloud SOAR, Sumo Logic DojoAI and Logs for Security.
Are Splunk and Sumo Logic in the same category?
Yes. SIEM is the primary category of both on CISO Tribune.
Where are Splunk and Sumo Logic headquartered?
Splunk is headquartered in San Jose, United States. Sumo Logic is headquartered in Redwood City, United States.
When were Splunk and Sumo Logic founded?
Splunk was founded in 2003.
Who owns Splunk and Sumo Logic?
Splunk is owned by Cisco. Sumo Logic is owned by Francisco Partners, since 2023.
Which customers do Splunk and Sumo Logic name?
Splunk publicly names Carrefour, Intel, FINRA, Alaska Airlines and Honda of Alabama.
Who are Splunk and Sumo Logic sold to?
From its own pages, Splunk sells mainly to organisations that want security, observability, and AI data on one platform. From its own pages, Sumo Logic sells to security analysts and SOC managers through its SIEM.
What have Splunk and Sumo Logic announced recently?
September 15, 2026: Cisco released Cisco AI POD for Splunk, which brings Splunk AI features to on-premises customers on Cisco infrastructure with NVIDIA computing. September 21, 2026: Sumo Logic unveiled enhanced Data Pipelines, extending its platform into data pipeline management so customers can control the cost and value of their telemetry.

About Splunk

Splunk sells a data platform for security, observability, and AI, and says the platform unifies petabyte-scale machine data wherever it lives.

Splunk says its unified platform gives teams cross-domain context for security, observability, and AI and keeps telemetry where it lives. Splunk says teams can search and analyze data where it lives to reduce costs. Splunk says its platform preserves full access and context for AI and analytics without the ingest tax or unnecessary data movement.

On the security side, Splunk says adversaries using AI are shrinking remediation windows from months to minutes. Splunk says its answer combines unified data, advanced TDIR, and AI agents that enable experts to mitigate threats across any attack surface. Splunk says teams can use AI agents and assistants to predict and prevent issues, eliminate toil, and accelerate remediation safely. Splunk describes a SOAR system that integrates orchestration, playbook automation, and case management. Splunk names Splunk Enterprise Security, Splunk IT Service Intelligence, and the Splunk Common Information Model as Splunk solutions that use pre-written macros.[1][12][17]

Splunk describes AI Assistant in Security as available to cloud customers of Splunk Enterprise Security, and says it automates repetitive steps and guides analysts in daily investigation workflows. Splunk describes a Triage Agent, in alpha, that evaluates, prioritises, and explains alerts. Splunk describes an Automation Builder Agent, in alpha, that turns natural language into SOAR playbooks. Splunk describes a Malware Threat Reversing Agent for customers of Splunk Attack Analyzer that summarizes threats by breaking down malicious scripts.[18]

Splunk Cloud Platform is described as a way to collect, index, and visualize data in the cloud. Splunk Enterprise is described as collecting, indexing, and visualizing data using an on-premises engine. Splunk describes Splunkbase as the place to discover, share, and install apps and add-ons with the Splunk community. Splunk says teams can connect and act on data through integrations and apps on Splunkbase, across cloud, SaaS, IT, and machine data from OT and IoT. Splunk says teams can instrument with native OpenTelemetry support, SDKs, and agents.[12]

Splunk describes Federated Search as the unifying search layer across the data estate, covering Splunk-managed locations and supported customer-managed stores such as Amazon S3 and Snowflake. Splunk describes Splunk AI Assistant as a natural-language entry point to the search workflow. Agent Mode is available in Splunk AI Assistant 2.1 or later for supported Splunk Cloud Platform and Cloud Connected deployments running Splunk platform 10.1 or later. Splunk describes the Splunk AI Toolkit as providing step-by-step guided workflows to build and deploy models for common business challenges.[19][20]

Splunk says Splunk Edge Processor applies cryptographic functions to data in real time as the data flows within an on-premises environment. Splunk says ODBC-enabled apps such as Microsoft Excel, Power BI, and Tableau can connect to the Splunk platform, with SQL queries used to interact with the server. Splunk describes Splunk Log Observer Connect as an integration that lets logs on Splunk Enterprise or Splunk Cloud Platform be queried and associated with Related Content in Splunk Observability Cloud.[12][19][21][22]

On the observability side, Splunk says teams can use AI SRE agents to isolate root causes across environments and identify targeted fixes such as rollbacks or capacity adjustments. Splunk says teams can track LLM token usage with visibility and attribution. Splunk describes a healthcare organization using the Splunk platform to monitor and analyze logs generated from medical devices.[12][13][14][19][21]

Splunk on the record

Sources

Splunk full record

  1. [1]ProductsSplunk · splunk.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Cisco completes acquisition of splunkCisco · newsroom.cisco.com · published March 18, 2024 · Tier A
  3. [3]Get the most out of splunk infrastructure monitoring and splunk itsiSplunk · splunk.com · published November 17, 2020 · Tier A
  4. [4]Contact usSplunk · splunk.com · undated page, accessed October 10, 2026 · Tier A
  5. [5]CarrefourSplunk · splunk.com · undated page, accessed October 10, 2026 · Tier A
  6. [6]IntelSplunk · splunk.com · undated page, accessed October 10, 2026 · Tier A
  7. [7]FinraSplunk · splunk.com · undated page, accessed October 10, 2026 · Tier A
  8. [8]Alaska airlinesSplunk · splunk.com · undated page, accessed October 10, 2026 · Tier A
  9. [9]HondaSplunk · splunk.com · undated page, accessed October 10, 2026 · Tier A
  10. [10]Cisco delivers trusted ai at scale through new splunk advancementsCisco · newsroom.cisco.com · published September 15, 2026 · Tier A
  11. [11]Cisco buys galileo strengthen splunks agentic monitoring capabilitiesSiliconANGLE · siliconangle.com · published April 9, 2026 · Tier B
  12. [12]Get Data In | Platform (last updated lastModifiedISO)Splunk · undated page, accessed October 28, 2026 · Tier A
  13. [13]Analytics Story: Warzone RAT | Splunk Security ContentSplunk · published May 13, 2026 · Tier A
  14. [14]Analytics Story: Trickbot | Splunk Security ContentSplunk · published May 13, 2026 · Tier A
  15. [15]Splunk | Data Platform for Security, Observability & AISplunk · undated page, accessed October 28, 2026 · Tier A
  16. [16]Splunk Enterprise Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed October 28, 2026 · Tier C
  17. [17]Using advanced macros - Splunk LanternSplunk Lantern · undated page, accessed November 3, 2026 · Tier A
  18. [18]L’IA au service de la sécurité | SplunkSplunk · undated page, accessed November 3, 2026 · Tier A
  19. [19]Investigating and searching across your data estate with Cisco Data Fabric powered by the Splunk platform - Splunk LanternSplunk Lantern · undated page, accessed November 3, 2026 · Tier A
  20. [20]Preparing data for use with the Splunk AI Toolkit - Splunk LanternSplunk Lantern · undated page, accessed November 3, 2026 · Tier A
  21. [21]De-identifying PII consistently with hashing in Edge Processor - Splunk LanternSplunk Lantern · undated page, accessed November 3, 2026 · Tier A
  22. [22]Using Log Observer Connect with Cloud Platform - Splunk LanternSplunk Lantern · undated page, accessed November 3, 2026 · Tier A
  23. [23]Splunk Launches Hosted Generative AI Models: Native-AI Insights, Zero Setup, Maximum SecuritySplunk · published February 18, 2026 · Tier A
  24. [24]Announcing Splunk Enterprise 10.2 & Splunk Cloud Platform 10.2 – Next Generation Querying & AnalyticsSplunk · published January 16, 2026 · Tier A
  25. [25]Splunk Observability + Galileo: Bridging the AI Trust GapSplunk · published May 28, 2026 · Tier A

Sumo Logic full record

  1. [1]Francisco partners completes acquisition of sumo logicSumo Logic · sumologic.com · published May 12, 2023 · Tier A
  2. [2]sumologic.comSumo Logic · sumologic.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]ContactSumo Logic · sumologic.com · undated page, accessed September 27, 2026 · Tier A
  4. [4]Cloud log management, monitoring, SIEM tools Sumo LogicSumo Logic · undated page, accessed October 28, 2026 · Tier A
  5. [5]Sumo Logic Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed October 28, 2026 · Tier C
  6. [6]PricingSumo Logic · undated page, accessed November 3, 2026 · Tier A
  7. [7]Who we are and what we doSumo Logic · undated page, accessed November 3, 2026 · Tier A
  8. [8]Sumo Logic SIEM | Real-time detection, AI-powered responseSumo Logic · undated page, accessed November 3, 2026 · Tier A
  9. [9]Cloud SOAR (Security Orchestration, Automation, and Response)Sumo Logic · undated page, accessed November 3, 2026 · Tier A
  10. [10]Sumo Logic DojoAI - Meet the AI agents that detect and resolve threats so you can focus on the work that matters most.Sumo Logic · undated page, accessed November 3, 2026 · Tier A
  11. [11]Logs for security - secure, comply, and respond with an integrated cloud security platformSumo Logic · undated page, accessed November 3, 2026 · Tier A
  12. [12]Application reliability solutionSumo Logic · undated page, accessed November 3, 2026 · Tier A
  13. [13]What's newSumo Logic · undated page, accessed November 3, 2026 · Tier A
  14. [14]Professional servicesSumo Logic · undated page, accessed November 3, 2026 · Tier A
  15. [15]Sumo Logic Expands DojoAI to Transform Security Investigations with New Agentic AI CapabilitiesSumo Logic · published December 1, 2025 · Tier A
  16. [16]Sumo Logic Brings Comprehensive Visibility Across Claude Ecosystem via New Integration with the Claude Compliance APISumo Logic · published May 21, 2026 · Tier A
  17. [17]Sumo Logic enhances Data Pipelines, advancing its AI-first platform to lower observability and security TCOSumo Logic · published September 21, 2026 · Tier A
  18. [18]Sumo Logic Expands Leadership Team with New CISO and SVP of Product ManagementSumo Logic · published May 6, 2026 · Tier A
  19. [19]Sumo Logic Reviews, Ratings & Features 2026 | Gartner Peer InsightsGartner Peer Insights · undated page, accessed November 3, 2026 · Tier C

Spot a factual error? Request a correction.