Datadog Log Management

Volume (events stored) - 10 - 50 billion

Billed at a flat rate

Volume (events stored) - 50 - 200 billion

Billed at a flat rate

Volume (events stored) - 200 - 500 billion

Billed at a flat rate

Volume (events stored) - 500 billion - 1 trillion

Billed at a flat rate

Out-of-the-box parsing for 200+ log sources.

Ingest, process, enrich, live tail, and archive all your logs.

Enrich and tag your logs for RBAC, cost control and usage allocation.

Generate log-based metrics for long term analysis.

Self-hosted archives, with the option to ad-hoc rehydrate back to Datadog.

Dynamic routing to desired retention tier options.

Centralize your log processing, enrichment and routing to multiple destinations.

Forward your logs in real-time to any destination in just a few clicks.

Collect, transform, and route logs to multiple destinations without the need to index.

Low-latency, cloud scale throughput.

RBAC-enabled.

For real-time exploration, alerting, and dashboards with mission-critical logs.

Build log alerts with Log Monitors.

Detect log anomalies proactively with Watchdog Insights.

Best suited for frequently accessed logs i.e. infrastructure, application, operational logs.

Prioritize logs for critical investigations.

Prioritize logs for critical investigations.

Build log alerts with Log Monitors.

Detect log anomalies proactively with Watchdog Insights.

Best suited for frequently accessed logs i.e. infrastructure, application, operational logs.

For real-time exploration, alerting, and dashboards with mission-critical logs.

For real-time exploration, alerting, and dashboards with mission-critical logs.

Prioritize logs for critical investigations.

Build log alerts with Log Monitors.

Detect log anomalies proactively with Watchdog Insights.

Best suited for frequently accessed logs i.e. infrastructure, application, operational logs.

For real-time exploration, alerting, and dashboards with mission-critical logs.

Prioritize logs for critical investigations.

Build log alerts with Log Monitors.

Detect log anomalies proactively with Watchdog Insights.

Best suited for frequently accessed logs i.e. infrastructure, application, operational logs.

Build log alerts with Log Monitors.

Detect log anomalies proactively with Watchdog Insights.

Best suited for frequently accessed logs i.e. infrastructure, application, operational logs.

For real-time exploration, alerting, and dashboards with mission-critical logs.

Prioritize logs for critical investigations.

Volume (events stored) is less than 10 billion

It is billed at a bundled storage+compute rate

You can store logs for 6, 12, or 15 months

You can enable Flex Logs Starter through the self-serve onboarding option

Retaining logs for long term auditing

Retaining logs for compliance and legal reasons

Need all logs for security investigations

Need to query logs for reporting and analytics for high cardinality data over long time periods

Customizable retention periods

Scalability

Rapid log search