--- title: "What you should know about DataDog flex logs" page_name: "What you should know about Datadog Flex Logs" type: "blog" slug: "should-know-about-datadog-flex-logs" published_at: "2024-08-22" modified_at: "2026-05-11" url: "https://www.sumologic.com/blog/should-know-about-datadog-flex-logs" canonical: "https://www.sumologic.com/blog/should-know-about-datadog-flex-logs" markdown_url: "https://www.sumologic.com/blog/should-know-about-datadog-flex-logs.md" lang: "en" excerpt: "Datadog also has a log solution with the name “Flex” in it. But what it promises in cost flexibility it loses in performance when you need your logs most." taxonomy_blog_category: - "Application Observability" - "DevOps & IT Operations" --- [ All blogs ](https://www.sumologic.com/blog "blog")[Application Observability](https://www.sumologic.com/blog/application-observability), [DevOps & IT Operations](https://www.sumologic.com/blog/devops-it-operations) # What you should know about Datadog Flex Logs [Manny Lopez](#blog-author-block-205) August 22, 2024 3 min read [Application Observability](https://www.sumologic.com/blog/application-observability), [DevOps & IT Operations](https://www.sumologic.com/blog/devops-it-operations) ##### Table of contents Late last year, Datadog [announced something called Flex Logs](https://www.datadoghq.com/about/latest-news/press-releases/datadog-launches-low-cost-high-volume-log-management-tier/#:~:text=(NASDAQ%3A%20DDOG)%2C%20the,prohibitive%20to%20use%20for%20observability.), a “more affordable” warm storage tier for [log data](https://www.sumologic.com/glossary/log-file/). Designed for high-volume datasets that are infrequently queried and don’t require real-time analysis, the Flex Tier offers Datadog Log Management customers a third option for data storage. It was basically Datadog’s way of saying, “Hey, we know storing all your log data with us costs an arm and a leg, so here’s a cheaper option.” It’s a warm storage tier designed for all those logs you collect but never really look at—kind of like that stack of New Yorker magazines you swear you’ll read someday. The Flex Tier offers Datadog Log Management customers a third option for data storage, Standard, Flex and Archive tiers. | | **Pricing** | **Description** | |---|---|---| | **Standard Tier** | $0.10 per GB ingested + $2.55 per million log events per month | Hot storage is designed to support real-time use cases such as dashboarding, alerting, and troubleshooting. | | **Flex Tier** | $0.10 per GB ingested + $0.05 per million log events per month + compute tier cost (see below) | Warm storage is designed for supporting historical data and less urgent investigations. | | **Archive Tier\*** | $0.10 per GB ingested | Warm storage is designed for supporting historical data and less urgent investigations. | *\*To analyze data stored in the Archive Tier, you need to “rehydrate” it into the Standard Tier and pay the applicable fees.* ## **The trade-off: cost vs. performance** Datadog can apply a $0.05-per-million-event charge to Flex Logs because it separates compute and storage retention costs. Compute refers to the querying capacity needed to run queries for Flex Logs. This is used when querying logs in the Flex Logs tier. The available compute tiers, based on log volume and price, are listed below: | **Size** | **Volume (events stored)** | **Month to month** | **Annual** | **On-demand** | |---|---|---|---|---| | Extra Small (XS) | 20 – 50 billion | $12,000 | $10,000 | $14,000 | | Small (S) | 50 – 200 billion | $42,000 | $35,000 | $50,400 | | Medium (M) | 200 – 500 billion | $90,000 | $75,000 | $10,800 | | Large (L) | 500 billion – 1 trillion | $180,000 | $150,000 | $216,00 | | Flex Logs Storage | Prices per 1M stored | $0.06 | $0.05 | $0.08 | Choosing Datadog’s Flex Tier for storage comes with a trade-off: you save on storage costs at the expense of search performance. While it’s cheaper to store data in the Flex Tier, running queries and retrieving results will take longer compared to the standard index. Essentially, if you want faster performance, you’ll need to sacrifice some of those cost savings. Making this decision isn’t as straightforward as it seems. It requires a deep understanding of how your organization will use the data once it’s ingested—a question that’s often easier asked than answered. ## **Which storage tier should you use?** To truly appreciate the value of Datadog’s Flex Logs, it’s crucial to categorize your logs into the appropriate storage tiers: Standard (hot), Flex (warm), and Archive (cold). But doing this effectively means you need to have a thorough grasp of the data you’re feeding into Datadog’s [log management solution](https://www.sumologic.com/solutions/log-management/). Consider these key questions: - What’s your daily data ingestion volume, and what types of log files are you ingesting? - How valuable is the data? Is it redundant and noisy, or is it critical to your observability strategy? - How does your team use this data? Is it for troubleshooting or compliance purposes? - How often are these logs queried, and how urgently do users need results – yesterday, or whenever? Unfortunately, Datadog doesn’t provide clear guidance on answering these questions. The responsibility of determining which logs to route to which tier falls squarely on the customer. And getting this wrong can be costly. Picture this: It’s the middle of an outage, and the logs you desperately need are stored in the Flex Tier. Now your team has to play a game of “Wait for the Data” while they all hit the system at once and [max out compute resources](https://docs.datadoghq.com/logs/log_configuration/flex_logs/#determine-the-compute-size-that-you-need:~:text=When%20your%20organization,contact%20your%20admin), potentially even dropping queries, all before they can even start fixing the problem. Fun, right? ## **The impracticality of storage tiers** In theory, storage tiers sound great as a way to save money and keep focused on the logs you need. But in practice, they’re not always as useful, with outsized drawbacks. This is one reason why Sumo Logic has moved away from storage tiers in favor of a [usage-based pricing model called Flex Pricing](https://www.sumologic.com/blog/devsecops-ai-disruptive-log-economics/). [This model lets you ingest as much data as you need](https://www.sumologic.com/blog/log-everything-zero-dollar-ingest/) without worrying about performance trade-offs or deciding which tier to use. It provides a scalable and efficient [log analytics](https://www.sumologic.com/guides/log-analytics/) architecture that adapts to the demands of enterprise-wide and cloud-scale log ingestion, without forcing you to compromise on cost or performance. It’s like having your cake, eating it, and then getting another cake because you really can ingest everything. [Learn more about Sumo Logic pricing](https://www.sumologic.com/pricing/) or [sign up for your free trial](https://www.sumologic.com/sign-up/). ### Article Tags - [Application Observability](https://www.sumologic.com/blog/application-observability) - [DevOps & IT Operations](https://www.sumologic.com/blog/devops-it-operations) Manny Lopez Director, Competitive Intelligence With over 20 years of experience in market research and competitive analysis, Manny brings a deep understanding of market dynamics, technology trends, and strategic positioning. Most recently, he spent more than five years at Druva, where he led competitive intelligence initiatives supporting go-to-market strategy and product positioning. His career also includes over eight years as an analyst at IDC, where he was based in Hong Kong and Beijing, providing insights into the Asia-Pacific technology landscape. Manny’s diverse background spans vendor-side and analyst roles, giving him a well-rounded perspective on competitive strategy. [](https://www.sumologic.com/feed "RSS Feed")[](https://twitter.com/intent/tweet?text=What%20you%20should%20know%20about%20Datadog%20Flex%20Logs&url=https%3A%2F%2Fwww.sumologic.com%2Fblog%2Fshould-know-about-datadog-flex-logs "X")[](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.sumologic.com%2Fblog%2Fshould-know-about-datadog-flex-logs "Facebook")[](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.sumologic.com%2Fblog%2Fshould-know-about-datadog-flex-logs "Linkedin") [Previous blog How DPM monitoring helps you manage your metrics volume](https://www.sumologic.com/blog/monitor-dpm-volume-optimize-spend)[Next blog Cloudy with a chance of breach: advanced threat hunting strategies for a hyperconnected and SaaSy world](https://www.sumologic.com/blog/threat-hunting-hybrid-cloud-environment) People who read this also enjoyed [ Observability is security (We just pretended it wasn’t) April 28, 2026 ](https://www.sumologic.com/blog/observability-is-security)[ Get more out of Sumo Logic: five log search hacks you’ll actually use June 18, 2025 ](https://www.sumologic.com/blog/five-log-search-hacks)[ How to create and monitor an AWS Lambda function in Java 11 April 15, 2025 ](https://www.sumologic.com/blog/how-to-write-aws-lambda-function-in-java8)[ Elastic vs Sumo Logic: Build vs buy the right logging platform December 10, 2024 ](https://www.sumologic.com/blog/elastic-sumo-logic-build-or-buy) [AI Instructions](https://www.sumologic.com/ai-instructions.md)