Sanity vs Sumo Logic

Sumo Logic's recent cadence focuses on three coherent threads: enabling vendor-neutral telemetry (guided conversion of Installed Collectors to OpenTelemetry source templates, remotely managed apps via Source Templates, YAML editor for source templates), developer/operator ergonomics (Macro Operator for reusable query logic, query-when-fully-processed timing, quick actions in navigation menus, bulk insight updates up to 5,000), and enterprise/compliance plumbing (self-serve data deletion via UI or API, multi-org centralized role management, playbook execution history with cancellation).

Sumo Logic is positioning around the OpenTelemetry shift while reinforcing the enterprise admin surface. The OTEL migration tooling is the most strategically loaded — Sumo Logic is making it easier for customers to leave the proprietary collector path, which is the right long-term bet against Datadog and Splunk but creates short-term lock-in dilution. The compliance and multi-org features signal continued investment in regulated and enterprise buyers where Splunk has historically been entrenched.

Expect more guided OTEL migration tooling (e.g., dashboard/alert porting alongside collector conversion) and continued bulk-action work in the security ops surface. The self-serve data deletion path is likely to be followed by self-serve retention and data residency controls, completing the compliance-as-product story.