{"id":49982,"date":"2025-08-07T10:29:58","date_gmt":"2025-08-07T18:29:58","guid":{"rendered":"https:\/\/www.sumologic.com\/?post_type=blog&p=49982"},"modified":"2025-08-07T10:30:01","modified_gmt":"2025-08-07T18:30:01","slug":"sumo-logic-historic-baselining","status":"publish","type":"blog","link":"https:\/\/www.sumologic.com\/blog\/sumo-logic-historic-baselining","title":{"rendered":"From weeks to minutes: How Sumo Logic\u2019s historic baselining supercharges UEBA"},"content":{"rendered":"\n
\n
\n
\n
\n
\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Spotting threats fast and knowing whether they really matter is the name of the game in cybersecurity. That\u2019s where user and entity behavior analytics (UEBA)<\/a> comes in, and why Sumo Logic\u2019s latest innovation, historic baselining, is a big deal.<\/p>\n\n\n\n

With this release, Sumo Logic has turned the old UEBA model on its head, delivering insights that used to take weeks of learning time in just minutes. Here\u2019s how and why that\u2019s a game changer.<\/p>\n\n\n\n

What is UEBA?<\/h2>\n\n\n\n

UEBA is a way of detecting threats based on user behaviors and patterns instead of static rules. It tracks how users, devices, and systems typically operate, and flags suspicious activity.<\/p>\n\n\n\n

Think of it like a smart security guard who learns everyone\u2019s routines. When someone shows up at an odd time or tries to enter a restricted area, the guard knows something\u2019s off.<\/p>\n\n\n\n

The catch? Traditional UEBA needs time to learn. Most tools take weeks (or even months) of data before they\u2019re useful. Meanwhile, alerts are either overly generic or riddled with false positives. But historic baselining alleviates this, so you can quickly respond to threats. <\/p>\n\n\n\n

Sumo Logic\u2019s breakthrough: Historic baselining<\/h2>\n\n\n\n

With its June 2025 Cloud SIEM update<\/a>, Sumo Logic introduced historic baselining, which allows teams to use weeks of historical behavior data immediately.<\/p>\n\n\n\n

That means:<\/p>\n\n\n\n