Yes, for years in multiple companies. I greatly prefer it over Splunk or self rolled ELK crap.

If you reformat all your logs to output as json you can "| json auto nodrop" and suddenly you have fantastic statistics off every single field. It's also smart enough to figure out 'close enough' json, like if you're piping log output to syslog which adds it's own metadata.

Their Logreduce feature is also nice for "Ingestion suddenly shot up but eyeballing doesn't show a pattern, help me out here!" Hit the button and get logs grouped by 'these are pretty close except for x."

Amusingly they called me once. I apparently managed to craft a scheduled query that was causing their systems issues. I okayed them adjusting the query to something a little less aggressive.

The only feature that seems wonky is 'real time' (which they limit you on how many you can use). Never was a big issue, I generally would run 'real time' stuff every 15 minutes.

I will be very sad if they die or get bought out by Splunk. It's a great product.

My previous employer used it, and I use it nowadays for my side project. I like it, but granted, its the only log ingestion software I've ever used, so cant compare it. The charts I made are nice and I can easily pinpoint errors, bottlenecks and similar in my platform/code.

Here are some views that we're using for our little startup:

https://i.imgur.com/Q1V6ArY.png

https://i.imgur.com/rCfg4nr.png

https://i.imgur.com/GgYHgPA.png

Yes. I am the devops lead at a startup and it's an absolutely essential piece of our devops stack.

It's basically the Lite version of splunk, 90% of the features at 10% of the cost (which matters when we're talking 10s of thousands of dollars per year).

Yeah. I've used Sumo, Kibana, Loggly, paper trail, and GCP's logging stuff. And you know, good ole grep.

If I can't have grep, I'll probably always beg for SumoLogic. It's great, at least compared to what I've used so far.

I've used it for some projects alongside Splunk and ELK/Kibana for others. They're all effective at the scales we've thrown at them, but I find Splunk more intuitive to use, and IMO the query language is better documented.

We're using CloudWatch, Stackdriver and SumoLogic. SumoLogic is by far the best. It still has some room for improvement. But if you're stuck with could providers log aggregators - it's miserable.

At the dayjob we switched from Scalyr to Sumo Logic, primarily to meet requirements imposed by infosec.

I miss Scalyr, but I think that’s mostly because I haven’t learned how to be very effective with Sumo Logic yet.

The feedback I have heard has mostly been great, it is described as costly but worth the money at the same time.

I used it at a previous gig. It's ok. I prefer Splunk, but the cost difference is massive.

I do due diligence for a living. I see it just as much as I see splunk. Anecdotal I know.

we do use it, it's actually pretty neat. I was pretty surprised that no one on HN ever talked about it.