OpenObserve is a cloud-native observability platform built specifically for logs, metrics, traces, and analytics designed to work at a petabyte scale. It is very simple and easy to operate as opposed to Elasticsearch which requires a couple of dozen knobs to understand and tune which you can get up and running in under 2 minutes. It is a drop-in replacement for Elasticsearch if you are just ingesting data using APIs and searching using Kibana (Kibana is not supported nor required with OpenObserve. OpenObserve provides its own UI which does not require separate installation unlike Kibana). You can reduce your log storage costs by ~140x compared to Elasticsearch by using OpenObserve. Below are the results when we pushed logs from our production Kubernetes cluster to Elasticsearch and OpenObserve using fluent bit. OpenObserve stored data in Amazon s3 and Elasticsearch stored data on Amazon EBS volumes.
Features
- Logs, Metrics, Traces
- Alerts, Dashboards
- Ingest and Query functions to aid advanced capabilities like enrichment, redaction, log reduction, compliance, etc.
- Advanced Embedded GUI
- SQL for Logs and Traces. SQL and PromQL for metrics
- Storage in local Disk, s3, MinIO, GCS