A typical use case for Elastic Observability is a centralized logging system. That's what it does.
My relationship with Elastic is as a reseller and implementer.
Elastic Observability offers a comprehensive suite for log analytics, application performance monitoring, and machine learning. It integrates seamlessly with platforms like Teams and Slack, enhancing data visualization and scalability for real-time insights.


| Product | Mindshare (%) |
|---|---|
| Elastic Observability | 1.7% |
| Dynatrace | 5.0% |
| Splunk AppDynamics | 4.5% |
| Other | 88.8% |
| Type | Title | Date | |
|---|---|---|---|
| Category | Application Performance Monitoring (APM) and Observability | Aug 4, 2026 | Download |
| Product | Reviews, tips, and advice from real users | Aug 4, 2026 | Download |
| Comparison | Elastic Observability vs Datadog | Aug 4, 2026 | Download |
| Comparison | Elastic Observability vs Dynatrace | Aug 4, 2026 | Download |
| Comparison | Elastic Observability vs Splunk AppDynamics | Aug 4, 2026 | Download |
| Title | Rating | Mindshare | Recommending | |
|---|---|---|---|---|
| Splunk Enterprise Security | 4.2 | N/A | 94% | 418 interviewsAdd to research |
| Datadog | 4.3 | 4.4% | 97% | 211 interviewsAdd to research |
| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 4 |
| Large Enterprise | 14 |
| Company Size | Count |
|---|---|
| Small Business | 308 |
| Midsize Enterprise | 153 |
| Large Enterprise | 551 |
Elastic Observability is designed to support production environments with features like logging, data collection, and infrastructure tracking. Centralized logging and powerful search functionalities make incident response and performance tracking efficient. Elastic APM and Kibana facilitate detailed data visualization, promoting rapid troubleshooting and effective system performance analysis. Integrated services and extensive connectivity options enhance its role in business and technical decision-making by providing actionable data insights.
What are the most important features of Elastic Observability?Elastic Observability is employed across industries for critical operations, such as in finance for transaction monitoring, in healthcare for secure data management, and in technology for optimizing application performance. Its data-driven approach aids efficient event tracing, supporting diverse industry requirements.
PSCU, Entel, VITAS, Mimecast, Barrett Steel, Butterfield Bank
| Author info | Rating | Review Summary |
|---|---|---|
| Assistant Vice President at QualityKiosk Technologies Pvt. Ltd. | 4.0 | I find Elastic Observability highly customizable and stable, though its out-of-the-box use cases and support need improvement. It's cost-effective compared to competitors, but the complex licensing model and large-scale deployment challenges can be difficult. |
| Technology Consultant at Hybrid software | 5.0 | I've used Elastic Observability for four years to monitor customer data, finding its dashboards and real-time insights invaluable, though index management could improve; it's stable, scalable, and essential for diagnosing issues across our global cloud system. |
| Senior Consultant at Skillfield | 4.5 | My experience with Elastic Observability is extensive, starting with logs and evolving to include robust central management, numerous connectors, real-time telemetry, and a comprehensive UI. Although query language learning is needed, AI-driven features simplify custom queries and alerts. |
| Product Owner at Swisscom | 5.0 | I utilize Elastic Observability to analyze cloud-based workloads and manage anomalies. Its monitoring, dashboarding, and alerting features are valuable. However, compatibility with older databases needs improvement. While beneficial for users, profitability isn't directly assessed. I'm exploring alternatives like Check Point. |
| Chief Cloud Architect at a tech services company with 11-50 employees | 5.0 | Elastic Observability offers a unified platform for businesses, allowing scalability and multitenancy, ideal for managed service providers. Although it excels in openness across environments, improvements in asset discovery and log parsing would be beneficial. It outshines competitors like VMware. |
| Enterprise Architect at a mining and metals company with 10,001+ employees | 4.5 | I use Elastic for monitoring integration, particularly with OpenShift tools, to track messages and avoid breakdowns. Its built-in query and report features are valuable, though less user-friendly than Azure Monitor. Elastic effectively supports our integration efforts and reduces downtime risks. |
| IT Manager at Software Gurus | 3.5 | I find Elastic Observability valuable for its text search feature, but it needs better log retrieval and configuration flexibility. We've struggled with setup compared to other tools like Dynatrace, which is why we haven't seen returns or continued its primary use. |
| Senior Technical Sales at a tech vendor with 1,001-5,000 employees | 3.0 | I found Elk excellent for cloud-native log analytics, security, and application code, especially in hybrid environments. However, it lacked capabilities for on-prem network observability and device performance, requiring regular maintenance, leading to a 6/10 rating. |
| Managing Director at a tech vendor with 10,001+ employees | 3.5 | I rate this solution 7/10 for its cost-effectiveness, flexibility, and ease of deployment for technical and business observability. While stable, I'd appreciate more pre-defined dashboards and automated deployment tools, like those offered by Dynatrace, to speed up implementation. |
| Principal Reliability Engineer at a retailer with 10,001+ employees | 4.0 | We use Elastic Observability for collecting logs and application performance monitoring, leveraging centralized logging and visualization with Grafana. Its Elastic Common Search enhances log search organization-wide. It boosts efficiency and ROI, though improved standardization and schema are needed. We deploy on Microsoft Azure. |

A typical use case for Elastic Observability is a centralized logging system. That's what it does.
My relationship with Elastic is as a reseller and implementer.
In my opinion, the best features of Elastic Observability are their flexibility to integrate with other existing systems and the ability to build a unified monitoring tool that can integrate with existing ones and end-to-end user journeys which require a lot of customizations. The greatest feature in Elastic is the ability to customize.
This is similar to my comments about customizable dashboards in Elastic because it's visible to the analyst. However, it's very great. Customizing these dashboards can meet the customer's specific use cases and specific stories that they have in their environment, their special environment that doesn't look like other environments. The dashboarding in Elastic is highly customizable to the level of logos. If the customer wants his company logo in the dashboard, it can be done.
Out-of-the-box use cases have room for improvement in Elastic Observability. They don't invest a lot in building out-of-the-box observable use cases, and they are more focusing on giving a very flexible environment for customization. Some areas such as AI Ops still require data scientists to understand machine learning and AI, and it doesn't have a quick win with no-brainer use cases.
Elastic Observability is a stable solution, depending on what stability you refer to. If we talk about the solution as software, it is very solid, very stable. Elastic continuously upgrades the software. There are some bugs that come with each release, but they are keen always to build major versions and minor versions on time, including the CVE vulnerabilities to fix it. They have been publishing all of this online. They are not hiding it; they are an open-source company. So from this point of view, it is very stable. However, if you consider the stability of keeping to customize Elastic to cope with a dynamic environment at the customer, it needs constant resource efforts.
If I compare Elastic Observability today in 2025 to eight years earlier, it is much easier today in deployment than earlier. Elastic Observability would be easy in deployment in general for small scale, but when you deploy it at a really large scale, the complexity comes with the customizations.
I rate technical support from Elastic at a six out of 10. They are very responsive in support, but they are not always meeting customer expectations when it comes to finding the root cause of their problems. Elastic Observability requires a lot of information about any incident raised, and many of the incidents could be related to non-Elastic components. Elastic support really struggles in complex situations to resolve issues. Sometimes, tickets take long to be resolved because of the complexity of incidents. I witnessed this with many customers, and it's still consistently happening, and hopefully will be improved later.
Neutral
The problem is their licensing model, which is a bit confusing. Many customers struggle to understand their total cost of ownership because Elastic licensing is not dependent on easy, quantifiable metrics such as number of users or amount of data. Their licensing model is based on something called Elastic Search memory, which is a bit complex formula. On top of this, there are always dependencies. Once you get the right sizing of Elastic, you need additional infrastructure. You need appropriate infrastructure size that will accommodate Elastic sizing in terms of CPU, memory, and storage. This is a part of the hidden cost that the customer understands.
I think Elastic Observability is very cost-effective compared to its top competitors, such as Dynatrace and Splunk. It is well known that when it comes to price, they can provide the best prices among their competitors.
I have been through many changes in my position and company. I have experienced some tough times there.
That's my daily job working with other Elastic tools. I have experience with Elastic Observability.
I rate Elastic Observability an eight out of ten. They are a very strong solution, very powerful, very fruitful for many customers, but they are not definitely the best because of the lack of many out-of-the-box solutions that the customers are asking for, and still Elastic is not developing them.
My company today is called QualityKiosk. I am now the Assistant Vice President, not the Regional Sales Manager.

My use case for Elastic Observability is observability, as we upload our customers' data, including logs, and when there is an issue, we can analyze what went wrong.
The best features of Elastic Observability include the ability to easily make graphs and dashboards focused on a certain aspect of data, and I also appreciate that we can dig into the real data where the graphs are coming from with discovery, allowing us to look at the actual data inside the database.
The customizable dashboards in Elastic Observability allow us to group relevant data to specific aspects of our solution, giving us around 20 interlinked dashboards which provide an overview, and if one aspect shows weird behavior, we can focus on that specific aspect of our software with a dedicated dashboard.
The near-time insights provided by Elastic Observability influence our operational efficiency significantly, as we generate a lot of data uploaded in near real-time, making it much easier for us to search more sophisticatedly than we can with our own system, following developing issues very easily.
After careful consideration about areas for improvement in Elastic Observability, aspects such as pricing, customization, implementation, and scalability could be improved. As a user of the system, I know what it costs but am not directly involved in cost-benefit evaluations or maintenance, which is handled by another team. I develop the visual representation of the data and frankly, I don't see major gaps in my application or anything I would really miss; I appreciate the fast pace of the developments that have occurred in the last couple of years.
Regarding room for improvement in Elastic Observability, I would have preferred built-in tools to manage the indexes on deployment for better visual representation, as the initial feedback regarding system performance and data storage was fairly primitive and lacking.
I have been using Elastic Observability for four years.
I would rate the stability of Elastic Observability as a ten, as we don't experience any issues.
I rate the scalability of Elastic Observability as a ten, as we have never seen issues even with a lot of data coming in from more customers, provided we have the appropriate configuration.
I would rate the vendor support from Elastic Observability as a nine, since we don't use them often as I try to fix issues myself; their excellent documentation typically helps me solve any issues I encounter.
Positive
In terms of maintenance of Elastic Observability, from what I've heard, I find the setup easy with REST calls for the mappings and configuration of data streams and indexes, although there could be a better visual indication for maintaining built-in data to examine the indexes generated. There have been recent developments in that area, although I am not involved directly in that department, but I have done the setup and found it fairly easy because of my programming background.
The deployment of Elastic Observability has had its challenges; I constructed the first approach which didn't scale properly, leading to too many indexes, but after restructuring, the changeover was fairly easy with the help from Elastic diagnosing the issues we faced, making the experience from then on fluent.
It took us a couple of months to deploy Elastic Observability, as we started with Logstash and then switched to bulk uploading all the raw data ourselves without using any other tools, going directly into Elastic.
Elastic Observability has saved us time as it's much easier to find relevant pieces across the system in one screen compared to our own software, and it has saved resources too since the same resources can use less time. It is essential to our company because with our cloud system, Elastic Observability is the best way to visualize what's going on and how the system is behaving; we don't have another tool to do that, so even if it costs money and may not be the best cost performance wise, we really need it.
We are just an end user of Elastic Observability and do not resell it.
We have used the alerting mechanism in Elastic Observability, and it requires fine-tuning so that we don't get too many alerts while still receiving the important ones. We have established alerts for certain indications, typically using it actively to monitor the performance of our system. We have a cloud solution that reports data, and it allows us to go back in time to look at specific issues and analyze what went wrong and what we could do about it.
Regarding the machine learning algorithms in Elastic Observability, while we are not using them for every minimal operation, we do upload logs as they happen and specific end result parameters, but we haven't found a good use case for them yet; for example, they can summarize an issue, but that has turned out not to be very relevant to us.
Approximately 10 to 15 users work with Elastic Observability.
Our environment with Elastic Observability is global, as all our support can look at the data, covering the US and Europe, while the maintenance and development are local, based in Ghent, Belgium.
I would recommend Elastic Observability to other users because it is performant, very well documented, flexible, and highly usable. I rate Elastic Observability ten out of ten.
My experience with Elastic Observability is quite extensive, as that is how everything started for me. Initially, Elastic started with logs, but then observability came, followed by security on top of the basic features. The whole thing that ties everything together is that they used to have a lot of tools that are very lightweight; for example, you can deploy an agent and get logs from any platform, whether Windows, Linux, or others.
Yet, there was one thing missing with those kinds of tools, and that is central management. Previously, if you wanted to change the path of a file or the port where you wanted to listen for logs, someone had to log in or SSH into the box to make those changes. However, with the Elastic agent, all the configurations are maintained within Elastic. All you need to do is buy a dummy agent, and you can control the policies, deciding which rules you want to push to, say, a group of Linux nodes. All the Linux nodes should have these listeners to read the log messages, whatever they are. Everything comes out of the box, and there's a great UI displaying all the agents in tabs with many filters to control them.
APM works similarly; it uses the same agent but includes instrumentation files for various languages. For C++, they have certain modules and JAR files for Java, so you just need to instrument your code to see the function calls, APIs, and more on the screen.
They offer hundreds of connectors, allowing you to send messages to Teams, Slack, SQS, or do a webhook. Every integration, whether for Windows or Linux or even Palo Alto or Fortinet, installs the out-of-the-box dashboards along with it, making it easy to parse incoming data meaningfully and immediately start viewing dashboards to see what's happening in the platform.
The Elastic agent provides a real-time feed of logs and important telemetry such as metrics. They have out-of-the-box rules, so if someone wants to create a high CPU usage rule, it's just one click away, creating the rule behind the scenes. The UI displays all the agents in tabs with many filters to control them. Furthermore, it provides a streamlined way to deploy on Kubernetes including the entire manifest file.
I think they are working on the AI-based features, which are currently in technical preview. The only challenging aspect for new users is often writing the query language. Basic searching is very easy, but creating graphs or writing custom aggregations or histograms for daily averages requires some familiarity. There is currently no out-of-the-box integration for these tasks, and someone usually needs to write a simple query.
Recently, I tested their AI feature that connects to OpenAPI and anonymizes your data. You just ask a question, and it writes a query for you. For instance, if you have many error logs and want to create a rule with a custom query, such as triggering an alert for five errors in the last hour, all you need to do is open the AI bot, type this question, and it generates an Elastic query for you to use in your alert rules. Overall, they are going beyond just what the tool can do by incorporating features akin to Copilot functionalities.
Regarding the value of Elastic Observability integration with cloud service providers and various data sources, I think they have covered everything that most customers use. They offer cloud service integrations for Azure, AWS, and Google Cloud, and I believe there are connectors for Alibaba Cloud as well.
Before using Elastic Observability, I worked with Splunk and some out-of-the-box tools such as Datadog. That's just based on my own experience, but I did use quite a few tools.
They had some advantages over Elastic Observability back in the day, particularly in their central management features. Whenever I needed to onboard a machine, someone had to go to the machine to deploy tools such as Beats to collect logs and configure them. However, Elastic's central management now surpasses those other tools. There's no longer a need for a large operations team to handle configuration changes because all you need is one agent deployed when bootstrapping an image on a machine, and they also have Kubernetes configurations.
You can deploy the Elastic agent on Kubernetes, and the UI provides the entire manifest file to copy, paste, and simply use with `kubectl apply`. These functionalities weren't present in the past, which made us look into other tools, but Elastic has been implementing these features for some time and has matured in that space regarding central management of all agents.
The license for Elastic Observability is the same as for other uses; you pay for Elastic, and you can use it for various cases. Observability is actually cheaper compared to logs because you're not indexing huge blobs of text and trying to parse those. Instead, it's mostly about numerics, such as CPU percentage at any given time. Elastic is excellent with Time Series data, so even if you have five years' worth of data in the system, you can pinpoint a particular date, and it loads instantly.
I think Elastic Observability is already in very good shape. It has all the necessary connectors, and in terms of security, it has many cloud security posture management features enabled as well.
Most of the cloud sources I deal with are Azure, where everything can be configured to send logs to an Event Hub simply by setting the credentials. You don't even need to parse it, as Elastic's integration with all these cloud sources parses everything automatically and displays the results in graphs.
On a scale of one to ten, I would rate Elastic Observability a nine.

We have our workload in the cloud, and we take the data from the workload, put it in a data lake, and then analyze it. We keep track, build down anomalies, and so on.
The possibility to customize it has been quite useful. Whatever the other departments want to dream up, we implement. Whatever they want to monitor, the granularity of it, the changes in the threshold, and the anomalies that they want reported all require some development. So far, every single request has been fulfilled.
All the features that we use, such as monitoring, dashboarding, reporting, the possibility of alerting, and the way we index the data, are important.
One example is the inability to monitor very old databases with the newest version. Also, when opening tickets, we cannot use our team mailbox. It would be easier if tickets could be opened with the team mailbox.
We have been using the solution for a year and a half.
It is very stable, and I would rate it ten out of ten based on my interaction with it.
What is not scalable for us is not on Elastic's side. It's due to the way we built the automation and pipelines. We upgrade department by department, which is a limitation on our side.
The support is really prompt, and we don't have anything to complain about. We have probably only opened five tickets in a year.
Positive
The benefits are not with us but with the departments using it. We keep the platform alive and do the lifecycle, but we don't calculate the profit or loss.
The license is reasonably priced, however, the VMs where we host the solution are extremely expensive, making the overall cost in the public cloud high.
I am looking into solutions like Check Point and considering costs, environments, and features.
They should compare different observability solutions in a similar setup, take into account storage, traffic calculations, and list pros and cons. Also, consider the team's familiarity and comfort with the solution as this is equally important.
I'd rate the solution ten out of ten.
Elastic Observability correlates different sources and teams to provide a single, unified, achievable goal for businesses. We offer Elastic Observation and security as part of our managed services to our customers.
Elastic Observability has helped in breaking the silos within our customers' environments, allowing different teams to work together rather than being in separate silos. It offers a single platform for role-based access administration, improving the recoverability time and issue resolution.
The most valuable feature is the integrated platform that allows customers to start from observability and expand into other areas like security, EDR solutions, etc. It is scalable and supports multitenancy, which is beneficial for MSPs.
Elastic Observability could improve asset discovery as the current requirement to push the agent is not ideal. Simplifying the parsing of logs and manual efforts would also be beneficial.
We have been using Elastic Observability for about one year.
Elastic Observability is really stable. I rate its stability as very high, eight out of ten.
The scalability part is yet to be fully evaluated in my experience. We have not yet tested scaling up, but Elastic Observability seems to have a good scale-out capability.
Customer service and support are good, though we haven't needed to reach out significantly as it has been stable.
Positive
I have experience with other solutions like VMware products, however, Elastic Observability's openness across various environments makes it stand out.
The initial setup with Elastic Observability is very straightforward and not complex.
Our team is small but skilled, consisting of five people who are familiar with deploying and managing Elastic Observability. We are hiring more staff as we grow.
Elastic Observability is cost-efficient and provides all features in the enterprise license without asset-based licensing. However, sizing and licensing information could be clearer.
I have worked with VMware solutions like CloudHealth and not hands-on experience with solutions like QRadar or Dynatrace, but Elastic’s broad ecosystem gives it an advantage.
I recommend Elastic Observability for its completeness of vision and wide ecosystem. It reduces the need for multiple products by offering a comprehensive solution.
I'd rate the solution ten out of ten.
I use Elastic more for monitoring integration. For instance, I have OpenShift tools implemented in my company, and I have some workloads to integrate, expose APIs, and perform transformations from a source to the target application. I am using Elastic to monitor integration capabilities and track messages.
With Elastic Observability, we have avoided some breakdowns in our applications and integrations that could have had a business impact. These tools help us monitor and prevent applications from breaking.
Elastic provides built-in features for queries and report generation. It's a very good tool for monitoring integration capabilities.
I don't know how Elastic can improve. The integration feature I am using is very easy to implement.
I have used Elastic for about one year.
The solution is very stable and has been working very well for us.
We don't use Elastic customer service. However, the documentation available is very good.
Positive
Setting up Elastic was not so easy; it requires some manual processes.
We use around twenty people, including integration engineers and software engineers specializing in integration.
Elastic has provided a return on investment by helping us avoid application and integration breakdowns, which can be critical for our business. The exact amount of value is difficult to quantify but avoiding downtime is very important to us.
I am familiar with Azure Monitor, which I find more user-friendly compared to Elastic, which is a very technical tool.
Elastic Observability didn't help our organization because it was simpler for us to configure other tools, including Dynatrace and Grafana.
Elastic Observability needs to improve the retrieval of logs and metrics from all the instances. In an on-premise environment, the solution's data scrappers should be more flexible and simple to configure.
I would love to have the stack trace of the requests. For example, I want to track a request across all the environments and all the services we have.
Elastic Observability is a really stable solution, and we have not faced any issues with its stability.
I rate Elastic Observability an eight out of ten for stability.
I rate Elastic Observability a seven out of ten for scalability.
We use different tools and compare between free and paid tools. We already use different tools like Dynatrace, Grafana, Datadog, and New Relic. I usually compare different solutions and try to use the tool that helps me more. Right now, we are facing more issues while configuring and setting up Elastic Observability compared to other tools we have. So that's why we are now focusing on Dynatrace and some other tools.
Elastic Observability is a little bit complex to configure.
We have not seen a return on investment with Elastic Observability.
Since we are a huge company, Elastic Observability is an affordable solution for us. However, a startup may face some issues with the solution's pricing.
Elastic Observability is deployed on-cloud in our organization.
To use Elastic Observability, you will need to have some tech lead with experience in APM.
Overall, I rate Elastic Observability a seven out of ten.
The first time I encountered Elk was sometime around 2018. During that period, I was involved with a customer who had a very strict requirement. They had their own data center and a cloud data center, and they wanted to ensure comprehensive monitoring. This included not only applications from an application perspective but also network, code-level analysis, end-user experience, and more.
This was why the customer considered Elk as an observability solution, which one of their consultants proposed. They requested a proof of concept from both vendors, and I was the consultant who conducted a POC while also evaluating Elk.
The customer selected both solutions, choosing Riverbed for monitoring network infrastructure and end-user experience and Elastic for log analytics and their cloud services. I continued extensive analysis in healthcare and recently collaborated on a project with a bank in South Africa involving both Elk and Riverbed.
From my experience with several major customers, the most valued feature of Elastic is its log analytics capabilities.
I found Elk to be excellent for log analytics, security analytics, application code-level analytics, collaboration with DevOps teams, CI/CD, microservices, and Kubernetes, specifically cloud-native or cloud-specific tasks.
Of course, maintenance is necessary, as with any software, requiring updates with the latest features and security enhancements.
It lacked some capabilities when handling on-prem devices, like network observability, package flow analysis, and device performance data on the infrastructure side.
I first encountered Elk around 2018. I continued to work extensively, including a significant analysis in healthcare. Recently, I was involved in a project with a bank in South Africa, which was a collaborative effort with Elk and Riverbed.
As far as I know, there is a solution architect, and a professional services team is involved in understanding the requirement and starting the deployment. Generally, two or more people are needed due to the multiple moving parts.
As a user, I notice many competitors, like those from Elastic, Dynatrace, and VIAVI, trying to gain insights into the competition. Peercyte is one such competitor, possibly related to CMA or Forrester.
The overall product rating is six out of ten.
The call's initial expectations were unclear, as questions about Elastic's competition from an employee in a competitive company seemed inappropriate.
I use this product in projects that we do for other companies. We use the most updated version of the solution.
We're using Elastic to get information for several points of observability and several projects and solutions. We're using it broadly in lots of systems. For each solution, we're defining the observability points and the data we want to capture in each point. We're deploying Elastic as the tool to capture the data in each of these points in these transactions, and then putting that in the database. It allows us to analyze not only the number of transactions and quantities, but also the business content of each payload of the transactions in order to have business KPIs, not just technical KPIs. We have more than 300 data capture points in several systems.
This has been used by an IO monitoring team. We have two types of users: technical guys that are monitoring the stability of the systems where this tool is used, to see if we are having issues on the operation. This is the IO management team, and there are around 40 users. The second category is people related to business that are actually using this to capture business information, like the amount of transactions, credit sales, the average value of each operation, and things like that. In that sense, there are about 100 people looking at business dashboards.
The use is much heavier with the first group. They are tuning systems and deploying new data capture points, etc. Although there are more people in the second group, they are using it more to get the information and use it for tech and business decisions, but they are not heavy users in that sense.
It's easy to deploy, and it's very flexible. We have been able to easily deploy it in the data capture points that we want. After you capture the data payload of each transaction, it's also easy to do the search in the database.
It could come with more detailed or sophisticated dashboards that are pre-defined and that could speed up when you start looking at the data of the transactions. If we had some pre-defined templates for observability that we could start using right away after deploying it – instead of having to build or to change some of the dashboards – that would be helpful.
I would like to see an automated deploy tool, like Dynatrace has, that would allow you to have the parts of the system where you want to do the observability and they would deploy very quickly and kind of outer connect with the systems.
I've been using this solution for 12 months.
The stability is good. We didn't have trouble installing and getting the data from it. There haven't been any major incidents, just the normal tuning that you doing as part of the deployment.
We are still increasing the number of data capture points, but so far it's quite stable.
We have plans to increase usage in two dimensions: Horizontally because we are getting the same data points expanded to other instances of the same systems. We're not creating anything new. We are just deploying the same data capture point in different instances of the same solution.
We're also expanding vertically. We are creating new data capture points. When we start monitoring the solution, we kind of start having ideas of how to better view the operation. It's a little bit of a learning process when you start monitoring and seeing new opportunities.
The available documentation and the skill level that we have in the team has been enough. So far, we haven't used technical support yet.
Setup was straightforward to start getting the data and doing the searches that we want. I would rate setup 4 out of 5.
In comparison, Dynatrace is more automatic in terms of the deployment.
The implementation strategy was to deploy it system by system, point by point. We started looking at the systems that could have the best result for starting using this as observability tool. The idea was to deploy gradually and start getting results ASAP with the most critical transactions, instead of doing a major design of everything and deploying all at once with a bunch of transactions at the same time. It was gradual to start getting results as fast as possible.
Our technical team was about six to seven people. There were development guys because they are the ones that knew the systems and where to include the data capture points and then insert the API from Elastic that would be used to capture the data. The other guys were the IO management team and were monitoring the setup and building the database and dashboards.
Deployment was done internally with our team.
It's quite cost effective depending on your objective. I would rate the ROI 4 out of 5 because it really reached the objectives and at a lower price.
I would rate the pricing 4 out of 5.
So far, there are just the standard licensing fees. Several of the components are embedded in the license or are even open source. They're even free depending on what you use, which makes it even more appealing.
I have also used Dynatrace. Although Dynatrace is a great solution, it's becoming very expensive. They have increased the value of the licenses and the way they license, especially when we moved from on-premise to cloud. Because of the way they count the agents in the cloud for Dynatrace, it becomes really expensive. But Dynatrace is more ready as a solution. With Elastic, you need to code and program more things compared to Dynatrace.
Dynatrace is very well positioned in the market. I think they are becoming a little too confident in that differentiation, and are reflecting this in the license price, which is becoming prohibitive. I'm in Brazil, and our currency isn't in dollars, but the license is in dollars and is becoming more expensive. The exchange rate hasn't been favorable in the last few years.
I would rate this solution 7 out of 10.
The very positive features are the cost effectiveness and the range of things that you can implement. An improvement would be the ability to speed up the deployment, like Dynatrace. In that case, Elastic would have the cost effectiveness and would be easier to implement.
My advice is that you should first understand what kind of observability objectives you have in managing your environment. See if what you want to do is really being covered by each solution. If you're doing something that isn't that sophisticated, you don't need to pay the price of Dynatrace or Datadog. You can reach your objectives with something much more cost effective. Sometimes you don't need to buy a really expensive, sophisticated solution.
Understand your system landscape and what you want to do and what your objectives are before jumping into a specific tool. We put a lot of research into what we wanted to do and what was the best tool for our objectives.
You should also understand what you need to implement the selected solution: what sort of skills, how many people, if you have them or not in your team, and see if you need professional services before putting together the full business case to implement. If you don't have people that really know middleware and APMs properly, they tend to be quite expensive in the market. If you don't consider this properly, you may end with a big issue in fulfilling your business case. Human resource costs are not small in this sort of project.
We use the solution to collect logs. It also helps us with application performance monitoring. We use it for centralized logs and visualizing them with Grafana.
The tool's most valuable feature is centralized logging. Elastic Common Search helps us to search for the logs across the organization.
Elastic Observability needs to have better standardization, logging, and schema.
I have been using the product for three to four years.
I rate the tool's stability a seven out of ten.
I rate Elastic Observability's scalability a six out of ten.
We chose Elastic Observability since it was the industry standard.
The tool's deployment was complex.
Elastic Observability has helped us improve time and efficiency. We have seen ROI with its use.
I rate the overall product an eight out of ten.