Logz.io

Overview

Logz.io offers an observability platform that integrates log management, infrastructure monitoring, application performance monitoring (APM), and security information and event management (SIEM) capabilities. The platform is built around open-source components, primarily leveraging OpenSearch and Kibana for its analytical and visualization interface Logz.io overview. This approach aims to provide a familiar user experience for developers and operations teams already accustomed to these tools.

The service is designed to centralize and analyze telemetry data, including logs, metrics, and traces, from various sources such as applications, servers, containers (including Kubernetes), and cloud environments. Users can ingest data using a range of collectors and agents, including Fluentd, Filebeat, and Logstash, or directly via APIs Logz.io data shipping options. Once ingested, data is indexed and made available for searching, filtering, and visualization through custom dashboards.

Logz.io's core value proposition lies in its unified approach to observability, allowing teams to correlate different types of data to troubleshoot issues, monitor performance, and identify security threats. For instance, log data from a microservice can be correlated with performance metrics from the underlying Kubernetes cluster and traces showing request flows, providing a comprehensive view of an application's health. The platform includes features such as alerting based on predefined thresholds or anomalies, enabling proactive incident response.

Beyond operational monitoring, Logz.io extends into cloud security with its Cloud SIEM product. This component focuses on detecting security threats and compliance violations by analyzing security-related logs from cloud services, network devices, and applications Logz.io Cloud SIEM documentation. It provides pre-built rules and dashboards for common security use cases, such as detecting unauthorized access attempts or suspicious network activity.

The platform is generally suited for organizations that maintain complex, distributed systems, particularly those relying on cloud-native architectures and container orchestration technologies like Kubernetes. Its open-source foundation may appeal to teams looking for the flexibility and community support associated with these tools while benefiting from a managed service offering. The emphasis on a single platform for multiple observability pillars aims to reduce tool sprawl and streamline workflows for incident management and performance optimization, a common challenge in modern IT environments as discussed by industry analysts Martin Fowler on Observability.

Key features

• Log Management: Centralized collection, processing, analysis, and visualization of logs from diverse sources, built on OpenSearch and Kibana Logz.io Log Management features.
• Infrastructure Monitoring: Collection and visualization of metrics from servers, containers, and cloud services, offering dashboards and alerts for resource utilization and system health Logz.io Infrastructure Monitoring.
• APM (Application Performance Monitoring): Provides insights into application performance using distributed tracing, metrics, and logs, helping identify bottlenecks and errors.
• Cloud SIEM: Security information and event management system focused on detecting threats and compliance issues across cloud environments by analyzing security logs and events Cloud SIEM documentation.
• Synthetic Monitoring: Proactive testing of application availability and performance from various geographic locations using synthetic transactions Logz.io Synthetic Monitoring.
• Real User Monitoring (RUM): Collects data on actual user interactions with web applications to understand user experience and performance bottlenecks.
• Alerting and Anomaly Detection: Configurable alerts based on log patterns, metric thresholds, or machine learning-driven anomaly detection to notify teams of critical events Logz.io Alerting and Notifications.
• Compliance and Security: Supports various compliance standards including SOC 2 Type II, GDPR, HIPAA, ISO 27001, and PCI DSS Logz.io GDPR compliance.

Pricing

Logz.io offers a tiered pricing model primarily based on data ingest volume, retention period, and included features. As of May 2026, the free plan includes 3 days or 1 GB/day ingest (whichever comes first) with 7 days retention. The 'Grow' plan is the starting paid tier.

Specific pricing details for Grow, Pro, and Enterprise tiers are subject to negotiation and depend on the required ingest volume, data retention period, and specific feature sets. For precise quotes, direct consultation with Logz.io sales is recommended.

Common integrations

• AWS: Collect logs and metrics from Amazon EC2, S3, CloudTrail, CloudWatch, and other AWS services Logz.io AWS Integration.
• Azure: Integrate with Azure Monitor, Azure Event Hubs, and other Azure services for log and metric ingestion Logz.io Azure Integration.
• Google Cloud Platform (GCP): Ship logs and metrics from Google Cloud Logging, Google Compute Engine, and other GCP resources Logz.io GCP Integration.
• Kubernetes: Deploy agents like Fluentd or Filebeat to collect logs, metrics, and traces from Kubernetes clusters and containers Logz.io Kubernetes Logging.
• Prometheus: Ingest metrics directly from Prometheus exporters for infrastructure and application monitoring Logz.io Prometheus Integration.
• Grafana: While Logz.io uses OpenSearch/Kibana for its UI, it can integrate with Grafana for dashboarding if preferred, particularly for metrics Logz.io Grafana integration.
• Slack & PagerDuty: Configure notification channels for alerts and incident management Logz.io Notification Endpoints.
• Terraform: Manage Logz.io resources such as accounts, alerts, and dashboards using infrastructure as code Logz.io Terraform Provider.

Alternatives

• Datadog: A comprehensive monitoring and analytics platform offering logs, metrics, traces, and security monitoring with extensive integrations.
• New Relic: An observability platform providing APM, infrastructure monitoring, logs, and security features, with a focus on full-stack visibility.
• Splunk: An enterprise-grade platform for searching, monitoring, and analyzing machine-generated big data, commonly used for operational intelligence and security.
• Elastic Stack (ELK): A self-managed open-source alternative consisting of Elasticsearch, Kibana, and Beats/Logstash for log management and analytics.
• Sumo Logic: A cloud-native machine data analytics platform for logs, metrics, and security intelligence.

Getting started

To begin sending logs to Logz.io, you typically configure an agent or direct integration. Here's an example using the curl command to send a simple log entry directly to the Logz.io HTTP/S Listener API. Replace YOUR_LOGZIO_TOKEN with your actual account token and LISTENER_URL with the appropriate regional listener URL (e.g., https://listener.logz.io:8071 for US East).

curl -X POST \ 
  -H "Content-type: application/json" \ 
  -d '{ "message": "Hello, Logz.io! This is a test log entry from curl.", "type": "my-app-logs", "severity": "info" }' \ 
  "https://<LISTENER_URL>:8071/?token=<YOUR_LOGZIO_TOKEN>"

For more robust log collection, Logz.io recommends using dedicated agents like Filebeat, Fluentd, or Logstash, or integrating directly with cloud providers' logging services. For instance, to ship logs from an AWS EC2 instance using Filebeat, you would:

1. Install Filebeat: Download and install Filebeat on your EC2 instance.
2. Configure Filebeat: Edit the filebeat.yml configuration file to specify the path to your log files and configure the Logz.io output.
3. Add Logz.io output: In filebeat.yml, add the following output configuration, replacing placeholders:

   output.logstash:
     hosts: ["<LISTENER_URL>:5015"]
     ssl.enabled: true
     ssl.verification_mode: none
     loadbalance: true
     index: "<YOUR_LOGZIO_TOKEN>"
   
   # Optional: Add processors for additional data enrichment or filtering
   processors:
     - add_fields:
         target: ''
         fields:
           env: production
           service: my-web-app
   

4. Start Filebeat: Run Filebeat to begin shipping logs.

Refer to the Logz.io documentation on shipping data for detailed instructions on various integration methods.