Sumo Logic has announced new and expanded agentic AI capabilities that transform enterprise telemetry into actionable insights for Security and Cloud Operations teams. The release includes the SOC Analyst Agent, MCP Server, and an enhanced version of Mobot, extending agentic AI across security and observability workflows. The platform helps organizations accelerate incident response by reducing mean time to resolution (MTTR), improving operational efficiency, and automating analysis of large-scale telemetry data.
As AI advances at a breakneck speed, organizations struggle to govern and adopt trusted solutions. A recent survey of Sumo Logic customers found that 68% of respondents partially trust AI-created results but still require a human in the loop, with accuracy and explainability being critical to ensuring that security teams can verify results with reliable telemetry data. Simply pointing an LLM at raw telemetry only results in an AI agent that burns through credits and produces generic, untrustworthy answers.
“We believe that telemetry is the fuel of the AI future,” said Jeremy Powell, CISO for Sumo Logic. “Every threat detection, investigation, and response traces back to telemetry. As AI agents become an increasingly valuable tool for security operations, telemetry is the source of truth that separates a confident answer from an educated guess. We’re seeing this in our very own SOC, building from trusted telemetry from Sumo Logic Dojo AI, we were able to reduce MTTR by 64% and saved 25 hours per week per analyst.”
Telemetry is the foundation for trustworthy AI
Gleaning insights from data is increasingly challenging as AI solutions produce more and more data exhaust. Many AI security and observability tools simply pair an interface with an LLM and point it at raw log storage, relying on the model to figure out the rest. The result is an AI agent that inefficiently burns credits while producing generic or inaccurate answers. Sumo Logic’s Dojo AI agentic platform is built on its secure data lake, SIEM and context layer that normalizes, correlates, and enriches telemetry, creating signals autonomous agents need to quickly and accurately identify and resolve issues.
The Sumo Logic Intelligent Operations Platform refines telemetry into AI-ready fuel, and its conversational interface, Mobot, and MCP Server make it accessible wherever teams work. Together, this context layer and the agentic layer form an essential solution for intelligent security operations.
What’s new:
- SOC Analyst Agent – Now generally available, the Sumo Logic SOC Analyst Agent automatically investigates SIEM alerts, delivers evidence-backed verdicts, and enables instant human-led investigation through Mobot.
- Mobot – A significantly enhanced version of Sumo Logic’s conversational agent now includes multi-turn capabilities that help drive work forward, with new skills for creating and editing playbooks and other content.
- Conversational playbooks – Describe a workflow to Mobot in plain language and have a fully drafted playbook ready in minutes without needing to configure node-by-node.
- Log Analysis Agent – Guides analysts of every skill level from business question to defensible answer, going beyond query writing to guided investigation and content management with Mobot.
- Platform Optimization Agent – Helps users and admins get more value from Sumo Logic through troubleshooting, optimization, and guided configuration via Mobot.
- Sumo Logic MCP Server – Enables Sumo Logic users to connect tools such as Claude Code and GitHub Copilot to Sumo Logic SIEM and Log Analytics through a governed set of API tools. No custom integrations or raw data, just context, wherever teams work.
For more information, visit www.sumologic.com.
Related News:
