Alert fatigue is breaking SOCs. Sumo Logic says it has a way out.

Sumo Logic says SOC alert fatigue is better addressed by filtering noisy signals into entity-centric alerts, rather than simply ingesting more raw logs.

The model keeps real-time detection deterministic with rules, then applies AI afterward to reason over cleaner outputs and reduce noise.

Chas Clawson also highlighted Dojo.ai agents, auditability, and the need to balance human review with automation and trust.

The approach points to a shift in security operations toward entity-based triage and AI-assisted workflows that aim to preserve detection quality while cutting overload.