Hey everyone, I'm trying to wrap my head around how DataDog charges for their Cloud SIEM services. According to their pricing page, it states that the cost is $5 for every million events analyzed monthly or $7.5 if billed annually. Additionally, I know that indexed events are stored for 450 days. My main question is whether the cost of storing these log events for 450 days is included in the pricing mentioned, or do they charge separately for that? Thanks in advance for your insights!
2 Answers
So, here's the deal: DataDog tends to prefer customers to commit to annual spending, which is why they offer a discount for long-term contracts. The $7.5 you're seeing is typically the on-demand price, while the $5 is likely the rate you can get if you agree to a larger commitment. Also, when it comes to logs, you don't have to index them unless you plan to reference them later for alerts or signals. You can analyze incoming logs and choose to drop them instead of indexing, which could save you some money. Just keep in mind that indexing logs is billed separately from Cloud SIEM.
Thanks, that clears things up! Just to clarify about the logs: while you initially mentioned that indexing isn't necessary, I've run into some rules about how logs are actually processed by Cloud SIEM. You do need to create a Cloud SIEM index and set filters for the logs you want processed and stored. As of late 2023, they've also started allowing for Flex Logs, which could change how some folks approach their storage. The standard storage duration is still 450 days, though.

Related Questions
How to Build a Custom GPT Journalist That Posts Directly to WordPress
Cloudflare Origin SSL Certificate Setup Guide
How To Effectively Monetize A Site With Ads