Alert fatigue is breaking SOCs. Sumo Logic says it has a way out.
The New Stack 2 months ago 31
Security teams collecting excessive log data overwhelm analysts with alerts, and Sumo Logic proposes using AI agents to filter and correlate signals while maintaining human oversight. The company's Dojo.ai platform uses deterministic rules for real-time detection and AI reasoning on cleaned data, with every agent action traceable to prevent black-box decision-making. Organizations should tier storage by detection priority and consolidate tools rather than expand logging, as SOCs shift from human-reviewed every alert to AI-assisted triage with humans handling significant cases.