Germany verdict (TL;DR)
Verified 2026-05-23Germany observability buying is shaped by the most rigorous data-protection enforcement in the EU. DAX 40 (BMW, Mercedes-Benz, Bosch, Siemens, Allianz, Deutsche Bank, SAP, Volkswagen) procures Dynatrace and Datadog through long agency relationships with deep BSI C5 documentation requirements. German BSI C5:2020 attestation is the procurement-floor requirement at most DAX 40 cybersecurity reviews. German Mittelstand prefers EU-data-residency vendors and AWS Frankfurt, Azure Germany, or Open Telekom Cloud deployment. Dynatrace has the strongest German enterprise installed base (Linz origin, Austrian-German engineering culture, OneAgent fit at Mittelstand). KRITIS-regulated sectors (energy, water, finance, healthcare, transport, telecom) require additional NIS2-aligned observability evidence. BetrVG §87 works-council co-determination affects employee-facing observability and RUM deployments.
Picks for Germany
- DAX 40 enterprise (BMW, Mercedes-Benz, Bosch, Siemens, Allianz, Deutsche Bank, SAP, Volkswagen): dynatrace-obs Dynatrace has the strongest DAX 40 installed base in this ranking. Linz origin and Waltham headquarters give it a real DACH-engineering identity that resonates with German enterprise. Davis AI causation produces actionable root cause at dependency-heavy SAP-anchored landscapes. OneAgent rollout simplicity fits German enterprise IT-ops culture. EU Frankfurt data residency, BSI C5:2020 attestation, NIS2-aligned audit trail.
- German enterprise wanting broad SKU coverage with EU data residency: datadog-obs Datadog Germany has growing DAX 40 and Mittelstand share. 28-plus SKUs, EU Frankfurt data residency, German-language enterprise support available through reseller, DSGVO DPA, EU-US DPF participant. BSI C5:2020 attestation verified. Strong at German cloud-native and digital-first enterprises (N26, Personio, Celonis, Adjust tier).
- German engineering-led teams wanting cost-predictable open-source observability: grafana-cloud-obs Grafana Cloud at German SaaS scaleups (Personio, Celonis, Adjust, Contentful, N26, Mambu). Strong open-source heritage fits German engineering culture. EU data residency in Frankfurt and Sweden. Cost-predictable pricing fits German procurement discipline. Same Grafana visualization and Prometheus and Loki query stack as self-hosted.
- German enterprises wanting Elasticsearch-based observability with strong German installed base: elastic-observability-platform Elastic has very deep German enterprise installed base in log analytics (and SIEM). Elasticsearch as the query engine for logs, metrics, and traces. EU data residency. DSGVO DPA. Self-managed Elastic on AWS Frankfurt, Open Telekom Cloud, or T-Systems is the path for German organisations requiring sovereign deployment.
- German KRITIS-regulated sectors (energy, water, healthcare, finance, telecom): splunk-observability-platform Splunk Observability Cloud bundles APM and infra with Splunk Cloud logs at German KRITIS enterprises. BSI C5:2020 attestation, deep audit-log surface for NIS2 evidence, Cisco DACH presence. Splunk is heavily used at German Tier-1 energy (E.ON, RWE), telecom (Deutsche Telekom), and BFSI; Splunk Observability is the consolidation play.
- German Berlin-tech SaaS scaleups (N26, Adjust, Mambu, Contentful) wanting bundled OTel-native observability: honeycomb-obs Honeycomb at Berlin tech engineering teams. OpenTelemetry-native, BubbleUp query depth, transparent per-event pricing, no proprietary agent. EU Frankfurt data residency. Smaller Germany footprint than Datadog but credible for engineering-led procurement at Berlin tech.
How the observability platforms market looks in Germany
Germany has the most structurally constrained observability buying environment in this ranking. Three frameworks compound effect on procurement.
DSGVO (German GDPR implementation) requires explicit lawful basis for processing observability telemetry that includes personal data (user IDs, IP addresses, device identifiers, session payloads). German Datenschutzbeauftragter (DSB, mandatory DPO) reviews of observability deployments routinely scrutinise: data minimisation in telemetry payloads, EU-only data residency, EU-US Data Privacy Framework reliance documentation, and supplementary measures under Schrems II (encryption-at-rest, pseudonymisation).
TTDSG §25 (in force December 2021) requires explicit prior consent for browser-side cookie or device-storage access. Backend observability (APM, infra, logs, traces) is largely unaffected, server-side telemetry without cookies. RUM products (Datadog RUM, New Relic Browser, Grafana Faro) set browser cookies and capture user-session data that requires TTDSG-compliant consent; opt-in rates 30-50% in Germany (lowest in this ranking) materially reduce RUM sample size.
BSI C5:2020 (Cloud Computing Compliance Criteria Catalogue) is the German federal cloud-security baseline. AWS Frankfurt (eu-central-1), Azure Germany (Germany West Central), and Open Telekom Cloud hold BSI C5 attestation. Datadog, Dynatrace, Splunk, and Grafana Cloud have BSI C5 attestation through their underlying cloud infrastructure. DAX 40 procurement teams routinely require BSI C5 documentation as a floor; KRITIS-regulated sectors require additional sector-specific evidence.
KRITIS (Kritische Infrastrukturen, critical infrastructure) sectors, energy (E.ON, RWE, EnBW), water utilities, healthcare (Asklepios, Helios, Sana), finance (Deutsche Bank, Commerzbank, Allianz), transport (Deutsche Bahn, Lufthansa), telecom (Deutsche Telekom, Vodafone Germany, Telefonica Deutschland), face NIS2 transposition into German law and IT-Sicherheitsgesetz 2.0 (May 2021). Observability deployments must produce auditable evidence of detection capability and incident-response readiness. Splunk and Dynatrace dominate KRITIS observability procurement.
Betriebsrat (works council) co-determination under BetrVG §87 No. 6 applies to employee-facing or dual-use observability deployments. RUM that captures employee session data on internal applications, or APM that surfaces individual developer performance metrics, requires Betriebsrat consultation. This is a procurement-cycle factor unique to Germany; vendors with clear data-minimisation defaults (Honeycomb, Grafana Cloud) often clear Betriebsrat faster than vendors with rich user-session capture defaults (Datadog RUM, New Relic Browser).
Local champions: Dynatrace itself has a real claim here, originally founded in Linz, Austria with deep DACH engineering culture and German-language enterprise support; while now Waltham-headquartered, it remains the most-DACH-resonant observability vendor in this ranking. Checkly (Berlin, in our separate Synthetic Monitoring ranking) is a Berlin-built synthetics vendor.
DSGVO: observability telemetry (user IDs, IP addresses, device identifiers, session payloads, RUM data) constitutes personal data. Lawful basis required; German DSBs commonly require legitimate-interest documentation for backend observability and explicit consent for RUM. AWS Frankfurt, Azure Germany (Germany West Central), Open Telekom Cloud, and T-Systems satisfy German data-residency expectations. TTDSG §25: RUM and browser-cookie-based telemetry require prior opt-in consent; opt-in rates 30-50% in Germany materially reduce RUM sample size. Backend APM and infra and log and trace telemetry largely unaffected. Datenschutzkonferenz (DSK) guidance (May 2022): analytics-purpose cookies require opt-in; no analytics-exemption equivalent in German law. BSI C5:2020: German federal cloud-security baseline; AWS Frankfurt, Azure Germany, Open Telekom Cloud hold attestation. Datadog, Dynatrace, Splunk, Grafana Cloud, Elastic Cloud, Honeycomb attest via underlying cloud infrastructure. Verify vendor-specific C5 documentation before DAX 40 procurement. BaFin: German Federal Financial Supervisory Authority; BaFin BAIT and KAIT guidelines for German BFSI; observability deployments at Deutsche Bank, Commerzbank, Allianz must produce BaFin-defensible evidence trail. KRITIS and NIS2 (transposed into German law via NIS2-Umsetzungsgesetz): expanded incident-reporting obligations for critical-infrastructure observability. BetrVG §87 No. 6 (Mitbestimmung): works-council co-determination for employee-facing or dual-use observability and RUM deployments; Betriebsrat consultation routinely required. EU AI Act (provisions 2025-2026): AI-driven anomaly detection (Davis AI, Watchdog, Bits AI) may trigger transparency obligations for high-risk use cases; German DPOs and legal teams are the most EU AI Act-aware in the EU. EU-US Data Privacy Framework: US observability vendors must participate; verify current DPF status given pending Schrems III litigation.
Quick comparison, ranked for Germany
| Product | Best for | Starts at | 10-emp/mo* | Pricing | G2 | Geo |
|---|---|---|---|---|---|---|
| 2 Dynatrace Observability | Enterprise and large-enterprise IT ops teams in regulated industries prioritizing AI-driven root cause analysis | $0 + $0/emp | $0 | 4.5 | Global +4 | |
| 1 Datadog Observability | Mid-market and enterprise buyers consolidating multiple monitoring tools into a single observability bill | $0 + $0/emp | $0 | 4.4 | Global +4 | |
| 4 Grafana Cloud Observability | Engineering and SRE teams already on Grafana plus Prometheus seeking managed cloud with cost predictability | $0 + $0/emp | $0 | 4.5 | Global +3 | |
| 7 Elastic Observability Platform | Engineering teams with ELK stack investment or log-centric workloads at large scale seeking Splunk alternative | $0 + $0/emp | $0 | 4.4 | Global +4 | |
| 6 Splunk Observability Platform | Enterprise IT ops and security teams already paying Splunk for SIEM or compliance logs seeking observability consolidation | $0 + $0/emp | $0 | 4.3 | Global +4 | |
| 8 New Relic Observability | Mid-market and lower-enterprise buyers sensitive to Datadog pricing seeking full pillar coverage in one platform | $0 + $0/emp | $0 | 4.3 | Global +4 | |
| 3 Honeycomb Observability | Engineering-led SRE and platform teams at SaaS scaleups committed to OpenTelemetry and high-cardinality debugging | $0 + $0/emp | $0 | 4.5 | Global +3 | |
| 5 Chronosphere | High-scale cloud-native engineering organizations with mature SRE function hitting cardinality cost walls | $0 + $0/emp | $0 | 4.5 | Global +3 | |
| 9 Sumo Logic Observability | IT operations teams with primary log analytics needs seeking a cost-effective Splunk alternative at mid-market scale | $0 + $0/emp | $0 | 4.3 | Global +3 | |
| 10 AppDynamics Observability | Existing AppDynamics enterprise renewals or Cisco-anchored enterprises prioritizing Cisco-stack consolidation | $0 + $0/emp | $0 | 4.3 | Global +3 |
*10-employee monthly cost = base fee + (per-employee × 10) using the lowest published tier. For opaque-pricing vendors, no value is shown.
What buyers in Germany actually pay
Median annual deal size by employee band, in EUR. Crowdsourced from anonymized buyer disclosures.
| Product | Employee band | Median annual (EUR) | Sample | Notes |
|---|---|---|---|---|
| Dynatrace Observability | 2,000-10,000 employees | €460,000 | 41 | DPS multi-pillar; EUR-billed; DAX 40 deployment; EU Frankfurt; BSI C5 |
| Datadog Observability | 500-2,000 employees | €158,000 | 38 | APM plus Infra plus Logs; EUR-billed; EU Frankfurt; DSGVO DPA |
| Grafana Cloud Observability | 200-1,000 employees | €51,000 | 34 | Pro plus Advanced; EUR-billed; Berlin-tech favorite; EU Frankfurt/Sweden |
| Elastic Observability Platform | 500-2,000 employees | €88,000 | 27 | Elastic Cloud; EU residency; EUR-billed; deep German installed base |
| Splunk Observability Platform | 2,000-10,000 employees | €480,000 | 22 | Bundled with Splunk Cloud logs; EUR; Cisco DACH sales; KRITIS deployments |
| New Relic Observability | 500-2,000 employees | €98,000 | 24 | Per-user plus per-GB; EUR-billed; German mid-market |
| Honeycomb Observability | 200-1,000 employees | €74,000 | 16 | Pro plus overage; EUR equivalent; EU Frankfurt residency; Berlin tech |
Germany-built or Germany-strong vendors worth knowing
Not yet ranked in our global top 10, but credible options for Germany buyers and worth a shortlist.
Dynatrace (Linz origin, DACH-rooted)
Visit ↗Originally founded in Linz, Austria 2005. Now Waltham, Massachusetts headquartered (NYSE:DT) but retains deep DACH engineering culture and German-language enterprise support. The most-DACH-resonant observability vendor in this ranking. Strongest DAX 40 installed base. OneAgent rollout simplicity fits German enterprise IT-ops culture. BSI C5:2020 attestation, EU Frankfurt data residency, FedRAMP High for federal-adjacent.
Checkly (Berlin)
Visit ↗Berlin-headquartered. Founded 2018. Modern code-first synthetic monitoring on Playwright (covered in our separate Synthetic Monitoring ranking). Strong Berlin-tech engineering community presence. Not a full observability platform; complementary synthetic-monitoring layer with strong Germany engineering credibility.
Open Telekom Cloud (T-Systems)
Visit ↗Deutsche Telekom subsidiary German sovereign cloud. BSI C5:2020 attestation, German data residency, German operational sovereignty. The most credible German-sovereign hosting option for self-managed observability (self-hosted Elastic, Grafana plus Prometheus plus Loki) for German federal, KRITIS, and sovereignty-sensitive enterprise.
instana (IBM, with DACH heritage)
Visit ↗Solingen-Germany-founded APM and observability vendor (2015), acquired by IBM 2020 and folded into IBM Observability. Retains German engineering presence. IBM-anchored procurement at German enterprises already paying IBM may consider Instana alongside Dynatrace and Datadog. Not in our primary top-10 but a German-heritage vendor worth noting.
All 10, ranked for Germany
Same intelligence as the global ranking, vendor trust, review patterns, verified pricing, compliance, reordered for the Germany market.
Dynatrace Observability
AI-driven root cause analysis built around the Davis causation engine.
Dynatrace (NYSE:DT) is the enterprise observability platform built around Davis, an AI causation engine that produces dependency-aware root cause analysis with significantly less manual correlation than competitors. The product spans APM, infrastructure monitoring, logs, RUM, synthetics, and digital experience. OneAgent is the single-binary auto-instrumentation agent that simplifies rollout vs Datadog Agent plus per-service integrations. Strengths: Davis causation produces concrete actionable root cause (not just correlation), OneAgent rollout is the simplest in the enterprise tier, Grail data lakehouse architecture (launched 2022) enables long retention without query degradation, and AppEngine app-building model (2023 launch) is the strongest extensibility story in the category. Weaknesses: pricing remains opaque vs Datadog (DPS Dynatrace Platform Subscription replaced legacy Host Unit pricing in 2023 but transparency improved only marginally), AI features are less effective on highly dynamic cloud-native workloads vs stable monolith and legacy enterprise, OneAgent footprint is heavier than OpenTelemetry-native alternatives, and OpenTelemetry ingestion arrived later than competitors (full DPS-priced OTel ingest matured 2024).
Large enterprise environments with regulated compliance requirements, dependency-heavy applications where root cause is the primary procurement driver, and IT operations teams (vs developer-led teams) who prioritize AI-driven diagnosis over query flexibility. Fits 1,000 to 100,000-plus employee organizations in finance, healthcare, government, manufacturing.
Engineering-led teams that want high-cardinality query depth (Honeycomb fits better), mid-market buyers without compliance drivers (Datadog or New Relic cheaper at this scale), or modern cloud-native shops that have standardized on OpenTelemetry from the start (Grafana Cloud or Chronosphere fits better).
Strengths
- Davis AI causation engine produces actionable root cause analysis
- OneAgent simplifies rollout (single binary, auto-instrumentation)
- Grail data lakehouse enables long-retention queries without re-indexing
- AppEngine extensibility model strongest in the category
- Public company (NYSE:DT) with disclosed financials
- Strong fit for enterprise compliance (FedRAMP High, HITRUST)
- Acquired Runecast Q3 2024 to expand cloud security posture
Weaknesses
- Pricing opacity remains higher than Datadog (DPS still partially opaque)
- OneAgent footprint heavier than OpenTelemetry-native alternatives
- Less effective on highly dynamic cloud-native workloads vs stable enterprise
- OpenTelemetry ingestion matured later than Datadog and Grafana Cloud
- Slower time-to-first-signal vs Datadog for new buyers
- Pricing model changes (Host Unit to DPS 2023) created buyer confusion
- Less developer-friendly than Honeycomb for engineering-led teams
Pricing tiers
partial- Free Trial15-day trial; full platform$0+$0 /mo +/emp
- DPS SubscriptionPer-GB ingestion plus query units; consumption-based; minimum annual commit typically $50K-$100KQuote
- Enterprise AnnualCustom contract; volume discount; FedRAMP High option availableQuote
- · Query unit consumption can spike under high-cardinality workloads
- · Grail long-retention queries priced separately
- · Synthetic test executions billed per-execution
- · AppEngine app development can incur compute and query costs
- · OneAgent host installation count drives commit floor
Key features
- +Davis AI causation engine for root cause analysis
- +OneAgent single-binary auto-instrumentation
- +Grail data lakehouse for long-retention queries
- +AppEngine extensibility for custom observability apps
- +Full-stack APM with PurePath distributed tracing
- +Infrastructure monitoring with cloud-provider integrations
- +Log management on Grail backend
- +RUM and synthetics for digital experience monitoring
- +AI-driven anomaly detection (Davis)
- +FedRAMP High availability for federal buyers
Datadog Observability
Largest observability product surface and integration catalog in the category.
Datadog (NASDAQ:DDOG) is the broadest observability platform in the market: 28-plus paid product SKUs spanning APM, infrastructure monitoring, logs, RUM, synthetics, profiling, database monitoring, network performance monitoring, cloud security management, and Cloud SIEM. Datadog ingests OpenTelemetry, supports its own agent (Datadog Agent), and runs 800-plus official integrations. Strengths: unmatched product breadth, deepest cloud-provider integration depth (AWS, GCP, Azure auto-instrumentation), strong UX and dashboard polish, fastest time-to-first-signal for new buyers, and a sales motion that has consolidated multiple-vendor stacks at thousands of enterprises. Weaknesses: custom-metrics pricing is the single most-cited bill-shock complaint in the category (verified disclosures show buyers crossing $250K to $1M annual run rate after seemingly modest cardinality growth), 28-plus SKUs create invoice surprise even at mid-market scale, host-density pricing for infrastructure monitoring punishes Kubernetes-heavy deployments, and aggressive sales tactics on annual renewal are widely reported. Buyers who can negotiate hard, control cardinality, and consolidate aggressively often justify the premium; buyers who cannot govern instrumentation budget end up overspending materially.
Enterprises that need broad pillar coverage in one platform, have the procurement team to negotiate annual renewals, and can govern instrumentation budget. Particularly strong for buyers consolidating multiple legacy monitoring tools into one bill. Fits 200 to 50,000 employee organizations across SaaS, finance, retail, and media.
Mid-market buyers without cardinality governance (will overspend on custom metrics within 6 to 12 months), Kubernetes-heavy teams sensitive to per-host pricing (Chronosphere or Grafana Cloud will scale cheaper), or engineering-led teams who want a single high-cardinality OpenTelemetry-native backend (Honeycomb fits better).
Strengths
- Broadest product SKU coverage in the category (28-plus paid products)
- Deepest cloud-provider integration depth (AWS, GCP, Azure)
- Strongest UX and dashboard polish across pillars
- Fastest time-to-first-signal for new buyers
- 800-plus official integrations; OpenTelemetry ingestion supported
- Aggressive AI feature roadmap (Bits AI, Watchdog)
- Public company (NASDAQ:DDOG) with disclosed financials and stable leadership
Weaknesses
- Custom-metrics pricing is the largest bill-shock complaint in the category
- 28-plus SKU sprawl creates invoice surprise and procurement complexity
- Host-density pricing penalizes Kubernetes-heavy deployments
- Aggressive renewal tactics widely reported (renewal up-tier pressure)
- Log ingestion overage charges accumulate fast under volume spikes
- Synthetic monitoring pricing model criticized vs Checkly and Datadog-internal historical pricing
- Vendor lock-in deepens with each adjacent SKU adopted
Pricing tiers
partial- FreeUp to 5 hosts; basic infrastructure monitoring only$0+$0 /mo +/emp
- Pro InfrastructurePer host per month; metrics and dashboards; 100 custom metrics included$15+$0 /mo +/emp
- Enterprise InfrastructurePer host per month; advanced alerting, anomaly detection, 200 custom metrics included$23+$0 /mo +/emp
- APM and TracingPer host per month; production-grade APM$31+$0 /mo +/emp
- Enterprise AnnualCustom contract; volume discount; negotiate aggressively on custom metrics and ingestQuote
- · Custom metrics beyond included quota (most common bill shock)
- · Log ingestion overage above committed volume
- · Indexed logs vs archived logs separate pricing
- · RUM, synthetics, profiling, DBM, NPM each separately priced
- · Annual renewal up-tier pressure
- · Synthetic test executions billed separately from monitoring hosts
Key features
- +APM with distributed tracing across 30-plus languages
- +Infrastructure monitoring with 800-plus integrations
- +Log management with indexed and archived tiers
- +Real user monitoring (RUM) for web and mobile
- +Synthetic monitoring with API and browser tests
- +Continuous profiling (CPU, memory, lock)
- +Database monitoring (DBM) for query-level diagnostics
- +Network performance monitoring (NPM)
- +Cloud security management (CSM)
- +Bits AI conversational interface and Watchdog anomaly detection
Grafana Cloud Observability
Managed bundle of Grafana, Loki, Tempo, Mimir, Pyroscope as a single observability backend.
Grafana Cloud is the managed cloud version of the Grafana open source observability stack: Grafana for visualization, Loki for logs, Tempo for traces, Mimir for metrics, Pyroscope for profiling, and Grafana k6 for synthetics and load testing. The product targets buyers who have standardized on the Grafana open source ecosystem and want to consolidate without building self-hosted infrastructure. Strengths: most cost-predictable scaling in the category (predictable per-metric and per-GB pricing without custom-metrics overage trap), strong open source heritage and migration story (lift and shift from self-hosted Grafana plus Prometheus is straightforward), full pillar coverage (metrics, traces, logs, profiling, synthetics, RUM through Grafana Faro), and excellent OpenTelemetry support. Weaknesses: query performance on metrics under high cardinality is below Chronosphere and Mimir at scale, dashboards-first UX feels less integrated than Datadog or Dynatrace, RUM (Grafana Faro) is newer and less mature than Datadog RUM or New Relic Browser, and the open source ecosystem fragmentation (Loki vs Datadog Logs, Mimir vs Cortex) adds learning curve.
Buyers already running Grafana plus Prometheus open source who want a managed migration path. Engineering and SRE teams who value cost predictability and dashboard customization. Mid-market and enterprise (200 to 10,000 employees) seeking lower total cost of ownership than Datadog at scale.
Buyers wanting executive-grade UX with no learning curve (Datadog or Dynatrace fit better), teams without Prometheus and Grafana literacy (Datadog has lower onboarding cost), or high-cardinality metrics workloads at large scale (Chronosphere is purpose-built for this).
Strengths
- Most cost-predictable pricing in the all-in-one category
- Strong open source heritage and migration story from self-hosted
- Full pillar coverage (metrics, logs, traces, profiling, synthetics, RUM)
- Excellent OpenTelemetry support
- Grafana visualization remains the de facto open standard for dashboards
- Grafana k6 (load testing plus synthetics) included
- Self-hosted (Grafana Enterprise) option for compliance buyers
Weaknesses
- Query performance on high-cardinality metrics below Chronosphere at scale
- Less integrated UX than Datadog or Dynatrace across pillars
- Grafana Faro (RUM) less mature than Datadog RUM or New Relic Browser
- Open source ecosystem fragmentation adds learning curve
- Loki at large scale requires careful index management
- Mimir tuning at high cardinality requires SRE depth
- Smaller enterprise sales motion than Datadog or Dynatrace
Pricing tiers
public- Free10K metric series; 50GB logs and traces per month; 14-day retention$0+$0 /mo +/emp
- Pro (usage-based)Per-series and per-GB pricing; calculator on website; typical mid-market $400-$2,000/mo$0+$0 /mo +/emp
- AdvancedStarts at $299/mo plus usage; SLA support; longer retention$299+$0 /mo +/emp
- EnterpriseCustom contract; volume discount; dedicated support; SAML SSO; audit logQuote
- · Per-series billing on metrics (cardinality awareness needed)
- · Log ingestion overage above committed volume
- · Extended retention beyond default priced separately
- · Grafana Faro RUM still maturing, pricing model evolving
Key features
- +Grafana visualization and dashboards
- +Loki for log aggregation and search
- +Tempo for distributed tracing
- +Mimir for metrics storage at scale
- +Pyroscope for continuous profiling
- +Grafana k6 for load testing and synthetics
- +Grafana Faro for RUM
- +OpenTelemetry collector and ingestion
- +Grafana OnCall for incident management
- +Grafana IRM (incident response and management)
Elastic Observability Platform
Elasticsearch as the unified query engine for logs, metrics, and traces.
Elastic Observability builds on Elasticsearch (the de facto open source full-text search engine) to deliver logs, metrics, traces, and synthetics. The product centers on the ELK stack heritage (Elasticsearch, Logstash, Kibana) plus APM (Elastic APM, 2017) and Synthetics (Heartbeat-derived, expanded 2022 to 2023). Elastic (NYSE:ESTC) public since 2018. Strengths: deepest log search outside Splunk (Elasticsearch index queries scale well at large volume), strong cost-effective alternative to Splunk Cloud for log-centric workloads, OpenTelemetry support has matured strongly 2023 to 2025, and the Elastic Cloud Serverless offering (2024) simplifies operations. Weaknesses: Elastic License v2 (Mar 2021) restricted SSPL-style use; AWS-OpenSearch fork created ecosystem fragmentation, APM depth still lags Datadog and Dynatrace on language coverage and trace visualization, ELK stack self-management at scale requires significant operations expertise, and Elastic Cloud pricing model (per-resource-unit) is hard for non-Elastic-experts to predict.
Buyers with existing ELK stack investment who want managed cloud version with observability built in. Log-centric workloads at large scale where Splunk is too expensive. Strong fit for engineering teams comfortable with Elasticsearch query depth. Fits 200 to 50,000 employee organizations.
Buyers wanting purpose-built APM with deep language coverage (Datadog or Dynatrace fit better), teams without Elasticsearch literacy (steep learning curve), or organizations sensitive to vendor licensing politics (AWS OpenSearch fork tension).
Strengths
- Deepest log search depth outside Splunk (Elasticsearch native)
- Strong cost alternative to Splunk Cloud at scale
- OpenTelemetry support matured 2023-2025
- Elastic Cloud Serverless (2024) simplifies operations
- ELK stack open source heritage and community
- Public company (NYSE:ESTC) with disclosed financials
- Strong AI search capabilities (vector embeddings, ELSER)
Weaknesses
- Elastic License v2 (Mar 2021) restricted SSPL-style use
- AWS-OpenSearch fork created ecosystem fragmentation
- APM language coverage lags Datadog and Dynatrace
- Trace visualization weaker than purpose-built observability platforms
- ELK stack self-management at scale requires significant ops expertise
- Elastic Cloud pricing per resource unit is hard to model
- Slower roadmap velocity since 2022 layoffs (Feb 2023 13% workforce reduction)
Pricing tiers
partial- Free14-day Elastic Cloud trial; Basic license self-managed$0+$0 /mo +/emp
- Elastic Cloud StandardStarts at $95/mo; per-resource-unit pricing; observability and security$95+$0 /mo +/emp
- Elastic Cloud GoldStarts at $175/mo; advanced features, ML$175+$0 /mo +/emp
- Elastic Cloud PlatinumStarts at $225/mo; full feature set$225+$0 /mo +/emp
- EnterpriseCustom annual contract; volume discount; FedRAMP Moderate availableQuote
- · Per-resource-unit scaling hard to model under search-heavy workloads
- · Long-retention indexed logs add storage cost
- · Cross-cluster search and replication adds resource units
- · APM agent footprint at high transaction volume
Key features
- +Elasticsearch full-text search engine (logs, metrics, traces)
- +Logstash data ingestion pipelines
- +Kibana visualization and analysis
- +Elastic APM with OpenTelemetry support
- +Elastic Synthetics (uptime and journey monitoring)
- +Elastic Cloud Serverless (2024 launch)
- +AI search with ELSER (Elastic Learned Sparse EncoderR)
- +Machine learning anomaly detection
- +Elastic Security (SIEM and endpoint adjacent)
- +Cross-cluster search across deployments
Splunk Observability Platform
Splunk Cloud logs unified with Splunk APM and Infrastructure Monitoring (SignalFx heritage).
Splunk Observability Platform combines Splunk Cloud (logs and SIEM), Splunk APM (SignalFx heritage 2019 acquisition $1.05B), Splunk Infrastructure Monitoring, and Splunk Synthetic Monitoring under one unified ingestion model. Cisco completed the Splunk acquisition Mar 2024 for $28B, the largest software M&A deal of 2024. Strengths: deepest log search and indexing depth in the category (Splunk SPL remains the gold standard for security and operations log analytics), strong fit for buyers already paying Splunk for SIEM or compliance logs, OpenTelemetry support (SignalFx-derived APM), and Cisco network and security integration roadmap. Weaknesses: post-Cisco acquisition execution drift is the most-cited concern (some integration delays, slower feature velocity vs Datadog), pricing remains opaque and high-volume buyers report 30 to 50% premium vs Grafana Cloud or Elastic at equivalent log volumes, Observability Cloud (SignalFx side) has lagged Datadog APM on language coverage, and Splunk SmartStore plus retention model is complex.
Buyers already running Splunk Cloud for SIEM or compliance logs who want to consolidate observability spend on one vendor. Enterprise IT operations and security teams with Splunk SPL skills. Fits 1,000 to 100,000-plus employee organizations with regulatory log retention requirements.
Buyers without existing Splunk investment (Datadog or Dynatrace are simpler buys), engineering-led teams wanting OpenTelemetry-first query depth (Honeycomb or Chronosphere fit better), or cost-conscious mid-market buyers (Grafana Cloud or New Relic scale cheaper).
Strengths
- Deepest log search and indexing in the category (Splunk SPL)
- Strong fit for buyers already paying Splunk for SIEM or compliance
- Cisco backing (NASDAQ:CSCO) and integration roadmap with Cisco network
- Splunk SmartStore lets cold logs sit on S3 cheaply
- Federated search across multiple Splunk indexes
- Strong enterprise compliance posture (FedRAMP High available)
- Stable enterprise sales motion and partner channel
Weaknesses
- Post-Cisco acquisition execution drift is most-cited concern
- Pricing opacity remains high; 30-50% premium reported at scale
- Observability Cloud (SignalFx APM) lags Datadog on language coverage
- Splunk SmartStore plus retention model is complex to model
- OpenTelemetry support arrived later than competitors
- Less developer-friendly than Honeycomb or Grafana Cloud
- Some buyer reports of slower feature velocity since Cisco close
Pricing tiers
opaque- Trial14-day trial; full platform$0+$0 /mo +/emp
- Splunk CloudPer-GB ingest; SVC (Splunk Virtual Compute) pricing for compute; minimum annual commit typically $100K-$200KQuote
- Splunk Observability CloudPer-host APM and Infrastructure; per-test synthetics; quote-onlyQuote
- Enterprise AnnualCustom bundle (Splunk Cloud plus Observability); FedRAMP High availableQuote
- · SVC compute scaling under heavy search workload
- · Long-retention indexed logs add cost; SmartStore mitigates
- · Synthetic test executions billed separately
- · Per-pillar SKU sprawl creates invoice complexity
- · Renewal up-tier pressure widely reported
Key features
- +Splunk Cloud log search and indexing (SPL)
- +Splunk APM (SignalFx heritage; OpenTelemetry-compatible)
- +Splunk Infrastructure Monitoring
- +Splunk Synthetic Monitoring (Rigor-derived)
- +Splunk RUM (real user monitoring)
- +Splunk ITSI (IT Service Intelligence)
- +Splunk SmartStore (S3-tiered log retention)
- +Federated search across indexes
- +Splunk Mission Control (SOAR-integrated)
- +Splunk Cisco AppDynamics integration roadmap
New Relic Observability
Per-user plus per-GB pricing model that scales cheaper than Datadog at mid-market.
New Relic is the original APM platform, founded 2008 by Lew Cirne, now a pe-backed observability platform after Francisco Partners and TPG took the company private Nov 2023 for $6.5B. New Relic One (rebranded 2020) unified APM, infrastructure monitoring, logs, browser RUM, mobile, synthetics, and serverless under a per-user plus per-GB pricing model that remains structurally cheaper than Datadog at mid-market scale. Strengths: cost-effective pricing model (Jul 2020 reset to per-user plus per-GB ingest), full pillar coverage in one platform, strong language coverage for APM (one of the deepest in the category), OpenTelemetry support has matured strongly 2023 to 2025, and disciplined post-PE behavior (no major layoffs or roadmap reversal reported through 2024 to 2025). Weaknesses: pre-private-take execution had stalled (2018 to 2022 product velocity below Datadog), brand recovery from the 2010s APM-only positioning has been slow, full-stack observability narrative is less coherent than Datadog or Dynatrace, and PE-ownership trajectory remains uncertain (5-year hold typical; expect exit pressure 2027 to 2028).
Mid-market and lower-enterprise buyers (100 to 5,000 employees) sensitive to Datadog pricing who want full pillar coverage in one platform. Particularly strong for development-team-led procurement where per-user pricing fits team structures.
Buyers needing the broadest SKU coverage (Datadog fits), engineering teams wanting OTel-first query depth (Honeycomb or Chronosphere fit), or large enterprise buyers concerned about PE-ownership stability through 2027 to 2028 exit window.
Strengths
- Per-user plus per-GB pricing scales cheaper than Datadog at mid-market
- Deepest APM language coverage (one of the top three)
- Full pillar coverage in one platform (APM, infra, logs, RUM, synthetics, mobile)
- OpenTelemetry support matured strongly 2023 to 2025
- New Relic AI conversational interface (2023 launch)
- Disciplined post-PE behavior to date
- Strong APM language SDKs
Weaknesses
- Brand recovery from APM-only positioning has been slow
- Full-stack observability narrative less coherent than Datadog
- PE-ownership trajectory uncertain (Francisco Partners and TPG, Nov 2023)
- 2018-2022 product velocity stalled; competitive recovery still ongoing
- Some pricing transparency gaps at enterprise scale
- NRQL learning curve steeper than vendor-neutral OTel querying
- Customer count growth slowed pre-take-private
Pricing tiers
public- Free1 full user; 100GB data ingest per month; basic features$0+$0 /mo +/emp
- StandardPer full user per month; alerts, basic SLA support$49+$49 /mo +/emp
- ProPer full user per month; advanced features, SOC 2 compliance$99+$99 /mo +/emp
- EnterprisePer full user per month; enterprise features, audit log, SAML SSO$349+$349 /mo +/emp
- IngestPer GB beyond 100GB free tier; tiered volume discount$0.25+$0 /mo +/emp
- · Full vs core user distinction can be confusing
- · Data ingest overage on alerting-heavy or RUM-heavy deployments
- · Long-retention beyond default tier add cost
- · Enterprise contract terms can vary widely
Key features
- +APM with 30-plus language coverage
- +Infrastructure monitoring (hosts, containers, Kubernetes)
- +Logs with NRQL query language
- +Browser RUM and mobile RUM
- +Synthetics monitoring
- +Serverless monitoring (AWS Lambda first)
- +New Relic AI conversational assistant
- +OpenTelemetry ingestion
- +Errors Inbox (error tracking)
- +Service maps and dependency visualization
Honeycomb Observability
OpenTelemetry-native high-cardinality observability built around BubbleUp.
Honeycomb is the observability platform for engineering-led teams that need to ask deep ad hoc questions of high-cardinality production data. Founded 2016 by ex-Facebook Scuba engineers (Charity Majors, Christine Yen), Honeycomb pioneered the BubbleUp query interface (anomaly comparison across high-cardinality dimensions) and was OpenTelemetry-native from inception. The product centers on traces and events as first-class primitives, with metrics and logs added later. Strengths: highest-cardinality query depth in the category, BubbleUp is the single most-praised feature in independent engineer surveys 2023 to 2025, OpenTelemetry-native ingestion with no proprietary-agent lock-in, transparent per-event pricing, and a sharp engineering-led brand (Majors and Yen are influential observability thought leaders). Weaknesses: narrower product surface than Datadog or Dynatrace (no native synthetics, no native RUM, no native cloud security), small team relative to commercial competitors (around 200 employees as of 2026), per-event pricing can scale unexpectedly under burst traffic, and less developed dashboarding for ops or executive consumption.
Engineering-led teams running modern distributed systems where high-cardinality query depth matters more than dashboard breadth. Particularly strong for SRE and platform teams at SaaS scaleups (100 to 5,000 employees) committed to OpenTelemetry and willing to wire in adjacent tools for RUM, synthetics, and security.
Buyers needing one platform for everything (Datadog or Dynatrace fit better), IT operations teams without engineering depth (the query model assumes OTel literacy), or executive-led procurement looking for dashboards-first observability (Datadog UX is more polished).
Strengths
- Highest-cardinality query depth in the observability category
- BubbleUp is the most-praised feature for engineering teams
- OpenTelemetry-native ingestion from inception (no proprietary agent)
- Transparent per-event pricing model
- Strong engineering-led brand and developer trust
- Refinery sampling proxy gives cost control without losing trace quality
- Fast time-to-first-query vs all-in-one platforms
Weaknesses
- Narrower product surface (no native synthetics, RUM, security)
- Small team relative to Datadog (around 200 vs around 7,000 employees)
- Per-event pricing can scale unexpectedly under burst traffic
- Less developed dashboarding for non-engineering audiences
- Logs ingestion is newer and less mature than competitors
- Limited cloud-provider integration auto-discovery
- No standalone profiling product (relies on OTel-emitted profiling data)
Pricing tiers
public- FreeUp to 20M events per month; 60-day retention$0+$0 /mo +/emp
- ProStarts at $400/mo for 100M events; 60-day retention; usage-based scaling$400+$0 /mo +/emp
- EnterpriseCustom contract; extended retention; volume discount; SAML SSO, audit logQuote
- · Per-event overage above committed tier
- · Extended retention beyond 60 days priced separately
- · Burst traffic can spike events ingested
- · Refinery sampling proxy is self-hosted; ops overhead
Key features
- +BubbleUp high-cardinality anomaly comparison
- +OpenTelemetry-native ingestion (no proprietary agent)
- +Distributed tracing as first-class primitive
- +Refinery sampling proxy for cost control
- +SLO management and burn-rate alerting
- +Triggers (alerting on query results)
- +Heatmap and trace search interfaces
- +Honeycomb for Kubernetes integration
- +Logs ingestion (newer, OTel-based)
- +Query-based dashboards and boards
Chronosphere
Cardinality control plane and OpenTelemetry-native ingestion for high-scale teams.
Chronosphere is the observability platform built specifically for cloud-native teams hitting cardinality and cost walls on Datadog or New Relic. Founded 2019 by ex-Uber engineers behind M3, the open source metrics backend Uber built to handle its scale, Chronosphere centers on Control Plane (cardinality reduction at ingest), Metrics, Traces, and Logs. Last reported funding round $115M Series C 2022 at $1.6B valuation, plus a reported $200M+ raise extending runway 2024 to 2025. Strengths: cardinality control plane is the strongest answer to runaway metrics bills at high scale, OpenTelemetry-native and Prometheus-compatible (no instrumentation lock-in), trusted by high-scale engineering organizations (Snap, DoorDash, Robinhood, Tellus, Datadog graduates), and transparent pricing model based on data points stored after Control Plane reduction (not raw ingest). Weaknesses: narrower product surface than Datadog (no native RUM, synthetics, security; though logs and traces are mature), enterprise sales motion still maturing, less brand recognition outside engineering circles (procurement teams less familiar), and primarily a fit for teams already past Datadog cardinality pain (less compelling at mid-market scale).
High-scale cloud-native engineering teams hitting Datadog or New Relic cardinality walls. Strong fit for SaaS scaleups and large enterprises (500 to 50,000 employees) with mature SRE function and Prometheus or OpenTelemetry standardization.
Mid-market buyers without cardinality pain (Datadog or Grafana Cloud fit better at this scale), IT operations teams without engineering depth, or executive-led procurement looking for unified all-in-one UX (Dynatrace fits better).
Strengths
- Cardinality control plane reduces metrics costs without losing signal
- OpenTelemetry-native and Prometheus-compatible ingestion
- Trusted by high-scale engineering teams (Snap, DoorDash, Robinhood)
- Pricing transparent and based on stored data points (not raw ingest)
- M3 open source heritage; deep Prometheus expertise
- SLO management and burn-rate alerting native
- OpenTelemetry traces and Loki-compatible logs add full pillar coverage
Weaknesses
- Narrower product surface than Datadog (no RUM, synthetics, security)
- Enterprise sales motion still maturing
- Less brand recognition outside engineering circles
- Primarily a fit for teams already past Datadog cardinality pain
- Smaller team relative to commercial competitors
- Self-managed-then-migrate-to-cloud path can be complex
- Less developed dashboarding for non-engineering audiences
Pricing tiers
partial- Trial30-day trial; full platform$0+$0 /mo +/emp
- EnterpriseCustom contract; pricing based on data points stored after Control Plane reduction; minimum annual commit typically $100KQuote
- · Control Plane rule complexity adds ops overhead at first
- · Data-point-stored model rewards cardinality discipline; spikes still incur cost
- · Logs and traces priced separately from metrics
- · Self-managed Chronosphere requires SRE investment
Key features
- +Cardinality control plane (rules-based reduction at ingest)
- +OpenTelemetry and Prometheus-compatible ingestion
- +Metrics storage and query (M3-based)
- +Distributed tracing (OTel-native)
- +Logs (Loki-compatible)
- +SLO management and burn-rate alerting
- +Notebook-style query interface (Lens)
- +Service health dashboards
- +Anomaly detection
- +Open source SDK and instrumentation libraries
Sumo Logic Observability
Log-centric observability platform under Francisco Partners ownership since 2023.
Sumo Logic delivers a log-centric observability platform with adjacent metrics (Sumo Logic Metrics, derived from the Carbon Black APM acquisition 2016 and SaaS-native), traces (2020 launch), and security (Cloud SIEM). Francisco Partners took Sumo Logic private May 2023 for $1.7B (12% premium to public price at the time, after the company had struggled to grow margins post-2020 IPO). Strengths: cost-effective alternative to Splunk Cloud at mid-market log volumes, strong cloud-native log analytics (founded SaaS-native in 2010, never had on-prem product), and disciplined post-PE behavior (no major layoffs through 2024 to 2025). Weaknesses: metrics and traces pillars remain less mature than dedicated platforms (Datadog, Dynatrace), brand recognition outside the log-centric niche is low, PE-ownership trajectory creates uncertainty, OpenTelemetry support arrived late, and feature velocity has been modest since take-private.
Buyers wanting log-centric observability at mid-market scale who find Splunk too expensive. Strong fit for IT operations teams with primary log analytics needs. Fits 200 to 10,000 employee organizations.
Buyers needing deep APM (Datadog or Dynatrace fit better), engineering teams wanting OTel-first query depth, or organizations needing FedRAMP High (Splunk Observability Cloud fits).
Strengths
- Cost-effective alternative to Splunk Cloud at mid-market scale
- Cloud-native architecture from inception (no on-prem legacy)
- Disciplined post-PE behavior under Francisco Partners
- Strong log analytics depth
- Cloud SIEM offering for security buyers
- Real-time anomaly detection
- Audit-friendly log retention model
Weaknesses
- Metrics pillar less mature than Datadog or Grafana Cloud
- Traces pillar less mature than dedicated APM
- Brand recognition outside log-centric niche is low
- PE-ownership creates exit-pressure uncertainty
- OpenTelemetry support arrived later than competitors
- Modest feature velocity since 2023 take-private
- Less developer-friendly than Honeycomb or Grafana Cloud
Pricing tiers
partial- FreeUp to 1GB/day; 30-day retention$0+$0 /mo +/emp
- EssentialsStarts at $270/mo; per-GB ingest tiered pricing$270+$0 /mo +/emp
- Enterprise OperationsPer-GB ingest plus per-host metrics plus traces; minimum annual commitQuote
- Enterprise SecurityCloud SIEM bundle; per-GB ingest plus security analyticsQuote
- · Per-GB tiered overage on high-volume logs
- · Metrics and traces priced separately
- · Long-retention beyond default tier add cost
- · Cloud SIEM optional but commonly added
Key features
- +Log analytics (cloud-native, SaaS from inception)
- +Sumo Logic Metrics
- +Sumo Logic Traces (OpenTelemetry-compatible)
- +Real User Monitoring
- +Cloud SIEM (security)
- +Sumo Logic Operations Analytics
- +Anomaly detection
- +Audit log retention model
- +Cloud-provider integrations
- +Dashboards and alerting
AppDynamics Observability
Cisco-owned APM and observability platform showing post-acquisition execution drift.
AppDynamics is the original full-stack APM platform alongside New Relic and Dynatrace. Cisco acquired AppDynamics Mar 2017 for $3.7B just before its planned IPO. Strengths: deep enterprise APM expertise, strong Cisco network integration, business iQ (business transaction monitoring) feature unique in the category, and FedRAMP Moderate available for federal buyers. Weaknesses: post-Cisco acquisition execution drift has been the dominant narrative since 2020 (multiple rounds of layoffs 2023 to 2024, leadership turnover, slower feature velocity vs Datadog), Splunk-AppDynamics convergence under Cisco post-Splunk-acquisition 2024 creates roadmap uncertainty (rumored consolidation under Splunk Observability), pricing remains opaque, and full-stack observability narrative has been overtaken by Datadog and Dynatrace. AppDynamics is now primarily a renewal play for existing buyers rather than a default new-purchase recommendation.
Existing AppDynamics enterprise customers evaluating renewal vs migration. Buyers with deep Cisco ecosystem investment (Cisco network, ACI, Meraki, Webex) where Cisco-stack consolidation matters more than feature parity.
New buyers without Cisco ecosystem investment (Datadog, Dynatrace, or New Relic are simpler buys), engineering-led teams wanting OTel-first query depth, or buyers concerned about Splunk-AppDynamics consolidation under Cisco.
Strengths
- Deep enterprise APM expertise from 2008-2017 product era
- Business iQ (business transaction monitoring) unique in category
- Strong Cisco network and security integration potential
- FedRAMP Moderate available for federal buyers
- Wide language coverage for APM
- Existing enterprise install base provides stability
- Enterprise partner channel through Cisco
Weaknesses
- Post-Cisco execution drift since 2020 widely reported
- Multiple layoffs 2023 to 2024 (reported 5-10% workforce reductions)
- Splunk-AppDynamics convergence creates roadmap uncertainty
- Pricing remains opaque relative to public-pricing alternatives
- Full-stack observability narrative overtaken by Datadog and Dynatrace
- Slower feature velocity vs commercial competitors
- Leadership turnover post-Cisco acquisition
Pricing tiers
opaque- Trial15-day trial; full platform$0+$0 /mo +/emp
- PremiumPer-host plus per-user; quote-based; minimum annual commit typically $50K-$100KQuote
- EnterpriseCustom contract; full platform; FedRAMP Moderate optionQuote
- · Per-host pricing penalizes Kubernetes deployments
- · Business iQ priced separately
- · Per-user licensing model unclear at enterprise tier
- · Cisco-stack bundle pricing requires Cisco rep negotiation
Key features
- +APM with deep language coverage
- +Infrastructure monitoring
- +Business iQ (business transaction monitoring)
- +End User Monitoring (RUM)
- +Synthetic monitoring
- +Database monitoring
- +Network performance monitoring
- +Application Security (deprecated, replaced by Cisco Secure)
- +Cisco AppDynamics for SAP
- +Cognition Engine (anomaly detection)
Frequently asked questions
The questions buyers actually ask before they sign.
Why does Dynatrace dominate DAX 40 observability procurement?
How do TTDSG and Betriebsrat affect German observability deployments?
Can German KRITIS enterprises use US-headquartered observability vendors?
What is the difference between observability and APM?
Is OpenTelemetry mature enough to use in production in 2026?
How do I avoid the Datadog custom-metrics bill shock?
Should we use a single all-in-one platform or best-of-breed multi-vendor?
How is the Cisco-Splunk-AppDynamics roadmap evolving in 2026?
What is Datadog SKU sprawl and how do I manage it?
How does Honeycomb pricing compare to Datadog at scale?
Is Grafana Cloud a credible alternative to Datadog for enterprise?
Final word
Looking at a different market? See the global Observability Platforms ranking, or pick another country at the top of this page.
Last updated 2026-05-23. Local pricing reverified quarterly. Found something inaccurate? Tell us.