Observability TCO Comparison

Compare true total cost of ownership — infrastructure and human operational costs — across observability platforms. Or open Serverless Estimator for Elastic Observability Complete (logs, metrics, traces) like the Cloud pricing form.

Estimation purposes only

This tool is not validated by Elastic Product, Marketing, or Competitive Intelligence for accuracy. List rates reconciled as of August 2026 against the Elastic Cloud Serverless and Cloud Hosted pricing tables plus ad hoc field feedback (e.g. Serverless estimator alignment). See also Serverless Observability pricing (TSDS metrics effective July 1, 2026). Other vendor rates and unit conversions are approximate. Confirm all figures with official pricing, contracts, and measured usage before customer-facing quotes.

Elastic Serverless (design in this tool)

  • 1-day hot · Streams → S3: Observability Complete ingest + 1-day hot retention at published floors; Streams moves aged data to S3 (object storage ~$0.023/GB-mo proxy). The retention slider sets total keep time (hot + S3).
  • Metrics (TSDS): published floors July 1, 2026: $0.023/GB ingest, $0.005/GB-month retained (hot window); logs, traces, and security use full Complete rates for ingest/hot.
  • Logs: metered ingest uses ~1.66× raw GB (enriched size per Elastic estimator).
  • Streams ingest shaping is always on: per-signal drop, aggregate, and downsample — adjust in Configuration.

Elastic Cloud Hosted — ECH (design in this tool)

  • $0.05/GB ingest/compute (Observability list proxy, same as ECH logs/APM) plus 1-day hot · ILM → blob (writable frozen) for the configured retention window (hot RAM-hour + ILM writable-frozen blob).
  • Applies to metrics, logs, traces, and security variable backbone — not the legacy “flat Complete retention months only” workbook model.
  • Full-fidelity ingest on ECH; Streams sampling is not applied to ECH rows (Serverless-only shaping).
  • List rates from elastic.co/pricing/cloud-hosted / cloud pricing table (data hot, snapshot storage, transfer).
  • Cluster minimums ($200 metrics, etc.) still apply where modeled.

Schemaless data blocks: Observability is schemaless at ingest — Streams uses AI to identify patterns, so there is no custom-metric SKU; the billable path is ingested GB/TiB (plus retention), not per-series metric packs. One block can carry mixed OTLP. Open the Data Blocks tab for illustrative $/TiB-month at 1, 50, 100, and 500 TiB/mo grounded in Serverless Observability pricing Complete floors ($0.09/GB ingest · $0.019/GB-mo retention for logs/traces; TSDS metrics $0.023 / $0.005) plus Streams → S3 object storage. Per-tab comparisons may still apply signal-specific metering for vendor parity (TSDS 25%, logs 1.66×, etc.).

Not included: Datadog/Splunk/etc. use approximate public list pricing; Grafana Cloud Metrics uses Pro billable series (samples/sec × 60 DPM ÷ 1 included DPM, $6.50/$5.90/$5.50 per 1k after 10k included) — not per million datapoints. Elastic is GB volume; Grafana/Datadog are unique-series meters, so high cardinality can favor Elastic and fat/low-cardinality samples can favor them. Operational FTE is optional. Excludes synthetics, LLM observability, Agent Builder, support ECUs, Cross-project Search mounted-GB charges, Adaptive Metrics, and negotiated discounts.

Configuration

Compare Elastic Cloud Hosted and Serverless with Datadog host and custom-metric pricing. The comparison chart and platform list update to match.

EDOT is Elastic's OTel distribution (merging into contrib). Agent/Beats metrics use the OTel/EDOT size.

100/sec
1/sec1.00M/sec
10

Each tag multiplies your metric volume by this number

Datadog host licensing

Datadog bills Infrastructure Pro ($15/host/mo) on Metrics plus custom metrics ($0.05/series/mo after included series), and APM Pro ($31/host/mo) on Tracing. Host count is separate from samples/sec.

Estimated 250 hosts (linux/windows/k8s-node inventory, or log GB/day ÷ 0.04 GB/host/day). Prefer manual hosts in Samples/sec mode.

Elastic retention

Serverless uses 1-day hot · Streams → S3: 1-day hot on Observability Complete, then Streams sends the rest to object storage (S3). ECH uses the same total retention window as 1-day hot + ILM writable-frozen blob (Cloud Hosted pricing). Self-hosted stays a fixed infra estimate.

1 mo8 mo15 mo

In short: keep recent data searchable for 1 day, then age the rest to object storage for long-term retention. Serverless ages to S3 (~$0.023/GB-mo); ECH ages to ILM blob (~$0.033/GB-mo snapshot) for the same total window. Metrics ingest + Serverless hot use the Observability Complete volume tier table × 25% (TSDS). ECH also includes the ~$200/mo cluster minimum.

Elastic Cloud Hosted (ECH)

All ECH rows use 1-day hot · ILM → blob (writable frozen) — 1-day data hot (RAM-hour) plus ILM on blob (writable frozen) for the same total retention as the slider above. Full-fidelity ingest; no Streams sampling on ECH.

Elastic Serverless · Streams shaping

Serverless uses 1-day hot · Streams → S3 plus the ingest shaping below. Dial each lever’s % volume removed to match how aggressive this customer wants to be — every environment differs. Chart totals update as you change these.

Savings vs unshaped
0%
~$0/mo
10% removed

Drop unused / noisy metric series before ingest.

0% (keep all)ConservativeAggressive 90%
28% removed

Roll up high-cardinality series (TSDS / stream processors).

0% (keep all)ConservativeAggressive 90%
66% removed

Reduce resolution on data older than the 1-day hot window before/while it lands on S3. Hot stays full fidelity.

0% (keep all)ConservativeAggressive 90%
Open Streams in Kibana →

Example wired streams

Sample stream policies for this signal — collapsed

Human / Operational Costs

Self-hosted platforms need engineering time to run. Fully managed SaaS (Elastic Serverless, Grafana Cloud, Datadog, etc.) is $0 platform ops. Enable only when comparing DIY Prom/Mimir/Thanos-style stacks.

Network Egress Costs

Egress costs excluded from calculations. Enable to see full TCO including data transfer costs.

Metric Volume Impact

Metric Source
Mixed
320 bytes/datapoint
Metrics per Second
100/sec
Monthly Metrics
259.20M

Federated data sources

Query and land observability data without treating object storage as a dead archive. Elastic can read federated datasets for ES|QL and dashboards, and write snapshots, exports, and connector pipelines back to cloud storage — data stays under your IAM policies.
Example · Amazon S3
Object storage

SSE-KMS · bucket policies · lifecycle to Glacier optional

Federated
connector · repository
IAM role · least privilege
ES|QL FROM externalSLM / connector sync
Elastic Serverless
Origin project
  • Kibana · Discover · ES|QL · dashboards
  • Cross-project search to linked o11y projects
  • Same query plane for hot data + federated S3
FROM s3://elastic-o11y-archive/logs/*
| WHERE @timestamp > NOW() - 24 hours
| STATS count = COUNT(*) BY service.nameRead: federated ES|QL over s3://elastic-o11y-archive/logs/*
Write: SLM repository + connector bulk index
Read path

Analysts query cold archives and partner buckets in place. No full re-ingest into hot tier unless you choose to promote data via a connector.

Write path

ILM searchable snapshots, compliance exports, and connector sync jobs write structured objects back to S3 for durability and cross-region DR.

TCO note

S3 storage + API requests are billed by AWS; Elastic charges ingest/retention on promoted or hot-tier data. Federated read avoids duplicating bytes on hot RAM.

Illustrative architecture for customer conversations. See Cross-project search, S3 snapshot repository, and Elastic connector docs for your deployment type.

TCO Comparison*

Internal estimates only — not validated by Elastic Product, Marketing, or Competitive Intelligence. Confirm with official pricing and customer usage before external quotes.

Compare platforms — Datadog — platforms shown for this comparison
Volume (GB) vs unique time series

Elastic bills total ingested volume (~77.2 GB/mo at 320 B/sample). Datadog custom metrics are also a unique series meter (plus hosts), not GB. High cardinality or faster scrapes inflate series bills while Elastic stays on GB — often a large Elastic advantage. Fat samples / few series can flip it the other way. Move samples/sec and bytes/sample to see both sides.

Bar lengths use a log scale because costs span more than 20× ($11$3.8K). Dollar labels stay linear.

Elastic Serverless
$11$137/yr· 0.00× max
Elastic Cloud Hosted (ECH)
$206$2,471/yr· 0.05× max
$206
Elastic (Self-hosted)
$600$7,200/yr· 0.2× max
16%
Datadog
$3,750$45,000/yr
100%

Pricing is based on publicly available list rates as of August 2026 (AWS us-east-1 Serverless and Cloud Hosted pricing tables). Elastic Observability Serverless Complete and TSDS metrics rates per elastic.co pricing (TSDS metrics effective July 1, 2026). All figures are estimates — actual costs vary with negotiated discounts, committed use, and deployment configuration. Use the Full Stack TCO tab for a complete cross-signal comparison. Contact your SA for a custom TCO analysis.