You’re collecting more telemetry than ever, but chances are it hasn’t made your job easier. Fragmented data, disconnected tools, and manual investigations mean more noise, slower response times, and higher operational costs.
The promise of AI is that it will solve it, but in most cases, you just end up trading noise for expensive hallucinations. Point an LLM at raw, unorganized log storage, and you get an assistant that burns through credits to produce generic, unreliable answers.
Dojo AI is different.
Today at Black Hat USA 2026, we’re thrilled to announce major enhancements to Sumo Logic Dojo AI, our agentic AI platform that translates massive, distributed operational and security telemetry into clear, actionable answers for both Cloud Ops and SecOps.
Refining telemetry into AI-ready fuel
An AI engine is only as good as the fuel you feed it. If you dump raw, unrefined data into an LLM, it sputters, burning through credits only to output generic, unreliable guesses.
Sumo Logic’s Dojo AI runs on refined, AI-ready data from the start. Our platform acts as the refinery, leveraging our Context Layer to normalize, correlate, and enrich exabytes of telemetry at ingestion. By transforming chaotic log data into high-octane, AI-ready signals before an agent ever touches it, Dojo AI gains the context required to investigate and resolve issues at machine speed.
What’s new in Dojo AI
SOC Analyst Agent: Automatic alert investigation
The SOC Analyst Agent automatically investigates Sumo Logic SIEM alerts, gathering additional context and executing hypothesis testing at machine speed.
- Evidence-backed verdicts: Delivers clear verdicts—Malicious, Suspicious, or Benign—complete with step-by-step rationale and supporting log evidence.
- Streamlined handoff: Allows security analysts to transition seamlessly into deep, interactive investigations via Mobot without starting from scratch.
Enhanced Mobot: Your Sumo Logic assistant
Our conversational interface, Mobot, just leveled up. From query assistant to analysis partner, Mobot is here to change the way you interact with your data and the Sumo Logic platform.
- Multi-turn conversations: Drills deeper into complex system outages or active security investigations through iterative, context-aware Q&A.
- Content generation: You can ask Mobot to generate dashboard panels or refine alerting monitors without requiring deep platform or query knowledge.
- Conversational playbooks: Describe a security or operational workflow in plain language, and Mobot drafts a fully structured playbook in moments, eliminating the manual node-by-node setup required.
Supporting agents helping you get more value
These agents, accessed via Mobot, work behind the scenes to help you get the most out of the Sumo Logic platform.
- Log Analysis Agent: Guides users of all skill levels through step-by-step investigations during system outages, translating plain-language questions into defensible operational insights.
- Platform Optimization Agent: Helps to tune query performance and answer administrative how-to questions in real time.
MCP Server: Connecting your workflows to Sumo Logic
The Sumo Logic MCP Server connects external AI clients such as Claude Code and GitHub Copilot directly to Sumo Logic.
- In-workspace visibility: Run log queries, inspect SIEM alerts, and verify system status directly inside your favorite IDE or AI client.
- Zero custom integrations: Provides structured, governed API access without complex custom integration pipelines or data exposure risks.
- Enterprise guardrails: Maintains your existing Sumo Logic RBAC, data policies, and security controls, ensuring external AI tools only access data that users are explicitly authorized to see.
The impact of Dojo AI
We are our own first customer. By pairing autonomous agents with a deeply correlated telemetry data lake, the Sumo Logic SOC experienced significant results:
- 64% reduction in MTTR
- 89% drop in time-to-triage
- 25 hours/week saved per analyst
Experience Dojo AI at Black Hat USA 2026
We are showcasing Dojo AI all week at Black Hat USA 2026 in Las Vegas!
Stop by Booth #5641 to take the Dojo AI Challenge, see live interactive demos, and speak with our technical engineering team.
Most Sumo Logic customers can access these new capabilities automatically–simply log in to try them out.
New to Sumo Logic and ready to transform your Security and Cloud Operations with governed, agentic AI? Request a demo.
