Cloud-native, no infrastructure to manage: There are no servers to maintain, and it scales with log volume.
Powerful search and query language: You can parse, filter, and aggregate logs quickly, and saved searches and dashboards make recurring analysis easy.
Unified logs, metrics, and traces: One platform covers observability and security monitoring.
Built-in security analytics: Its cloud SIEM features and pre-built apps for AWS, Kubernetes, and others speed up setup.
Real-time alerting: Alerts and dashboards help teams catch issues early and cut troubleshooting time.
Integrations: It connects with most major cloud services and DevOps tools. Review collected by and hosted on G2.com.
Cost: Pricing can climb quickly as log volume grows, and many users find it hard to predict or control spend.
Learning curve: The query language is powerful but takes time to learn, especially for complex parsing and aggregation.
Performance on large searches: Queries over big time ranges or huge data sets can be slow.
Dashboard and UI limitations: Some users find customization less flexible than competitors, and the interface can feel cluttered as features expand.
Alert tuning: Setting up alerts that are accurate without being noisy takes effort.
Support and documentation: Experiences vary, and some users say complex issues take a while to resolve.
Feature sprawl: Because the platform covers logs, metrics, traces, and SIEM, some capabilities feel less mature than specialized tools. Review collected by and hosted on G2.com.