Bills that grow with volume
Datadog prices logs per ingested GB plus per indexed event, and infrastructure per host. Costs scale with traffic and with every new product you turn on.
checked November 2026
Seven real options, who each one fits, where each falls short, and when it is better to stay on Datadog. We make LogTide, so we say plainly where it does not cover what Datadog does.
why teams look elsewhere
Datadog prices logs per ingested GB plus per indexed event, and infrastructure per host. Costs scale with traffic and with every new product you turn on.
Logs, APM, infrastructure, SIEM and more are separate line items. Forecasting a month ahead gets harder as usage spreads across them.
Datadog is SaaS only. Teams with strict residency, audit or air-gap requirements need something they can run on their own infrastructure.
Moving off a proprietary agent and query language is work. OpenTelemetry-native tools lower the cost of switching again later.
Pick by what you actually use Datadog for. A tool that is great at logs may be the wrong answer if your main use is APM.
Composable open-source observability, or Grafana Cloud
Best for: Teams that already run Prometheus and Grafana and want logs, metrics and traces as separate, scalable pieces.
Limits: More moving parts than an all-in-one tool. No built-in SIEM.
LogTide vs Grafana Loki →OpenTelemetry-native APM on ClickHouse
Best for: Teams that want the closest open-source match to Datadog APM: traces, metrics and logs in one UI.
Limits: ClickHouse is a real operational commitment at scale. No SIEM or detection rules.
LogTide vs SigNoz →The incumbent for search-heavy logging and security
Best for: Teams with large full-text search needs, existing Elastic skills, or a security program built on Elastic Security.
Limits: Self-managed clusters need JVM sizing, shard and lifecycle management. Some advanced features sit in paid tiers.
LogTide vs ELK Stack →Full-stack SaaS with usage-based pricing
Best for: Teams that want to stay on a hosted all-in-one platform but prefer ingest-plus-seat pricing over per-host billing.
Limits: Still SaaS only, and full-platform seats are priced separately from data.
LogTide vs New Relic →Hosted logs, uptime and incident management
Best for: Small and mid-size teams that want logging, uptime monitoring and on-call without running anything.
Limits: Narrower than Datadog on deep APM and infrastructure monitoring. Hosted only.
LogTide vs Better Stack →Log management with processing pipelines
Best for: Teams with syslog-heavy or network-device logging who want pipelines and role-based access in a packaged product.
Limits: Log-focused: no APM or metrics platform comparable to Datadog.
LogTide vs Graylog →Self-hosted log management with built-in SIEM
Best for: Teams whose Datadog bill is mostly logs, or who need logs to stay on their own infrastructure, with security detection included.
Limits: A log management and SIEM product, not a full Datadog replacement. See the gaps below.
LogTide vs Datadog in depth →Qualitative summary. Check each vendor's current documentation before deciding.
| Tool | Deployment | Strongest at | Pricing model | Open source |
|---|---|---|---|---|
| Datadog | SaaS | Full-stack observability | Per GB, per event, per host | No |
| Grafana stack | Self-hosted or cloud | Dashboards, metrics, cheap logs | Free self-hosted, usage-based cloud | Yes |
| SigNoz | Self-hosted or cloud | OpenTelemetry APM | Community edition self-hosted, per GB cloud | Yes (community edition) |
| Elastic | Self-managed or cloud | Full-text search, security | Tiered, usage-based cloud | Partly (see Elastic licensing) |
| New Relic | SaaS | Full-stack observability | Per GB plus seats | No |
| Better Stack | SaaS | Logs, uptime, on-call | Per GB ingest and retention | No |
| Graylog | Self-hosted or cloud | Log pipelines, syslog | Open edition, paid tiers | Open edition |
| LogTide | Self-hosted | Logs with built-in SIEM | Self-hosted, no seat pricing | Yes (AGPLv3) |
checked November 2026
Taken from each vendor's public pricing page. List prices only: volume discounts, contracts and plan minimums change the real number, and the units differ between vendors, so these are not directly comparable. Elastic and Graylog are omitted because we could not verify a simple comparable figure. Self-hosted tools cost infrastructure and engineering time instead of licence fees.
A common pattern is to keep Datadog for APM and move only the log volume somewhere cheaper. If self-hosting is the draw, read about self-hosted log management first. Other side-by-side pages: LogTide vs SigNoz, LogTide vs Grafana Loki, LogTide vs New Relic.
It depends on what you use Datadog for. For open-source APM closest to Datadog, SigNoz. For a composable stack around Prometheus, the Grafana stack. For hosted all-in-one, New Relic or Better Stack. For self-hosted log management with built-in SIEM, LogTide.
Yes. The Grafana stack, SigNoz (community edition) and LogTide are open source and can be self-hosted. They differ in scope: SigNoz and Grafana cover metrics and traces more deeply, while LogTide focuses on logs and security detection.
Not for every team. LogTide covers log management, alerting, OTLP ingestion and a built-in SIEM. If you rely on Datadog for APM, profiling, RUM, synthetics or its large integration catalog, LogTide will not replace those today.
Stay if you use many Datadog products together, depend on its integrations and auto-instrumentation, have no capacity to run infrastructure, and your bill is justified by the time it saves your team.
Inventory what you use, deploy LogTide, switch SDKs or shippers, rebuild alerts, run both in parallel to validate, then cut over. The Datadog migration guide walks through each step.
Deploy LogTide with Docker Compose, send a copy of your logs, and compare it with your current setup before you commit.