Ding ding ding ding.<p>It&#x27;s not the log storage that we care about, it&#x27;s what we can do with those logs.<p>I&#x27;ve been through three logging vendors in the last two years (Loggly, LogEntries, now Sumo Logic) and I&#x27;m looking to move once again.  The secret sauce is not the storage volume; our volume is relatively small: 4.3 GB&#x2F;day.   The secret sauce is the intelligent structuring of unstructured log data, analytics+alerting on the now-structured data, and live tail&#x27;ing of logs.<p>Sumo Logic does an okay job at the parsing&#x2F;querying&#x2F;alerting&#x2F;analytics piece but live tailing is a brand-new feature for them and it has limitations.   Sumo Logic&#x27;s pricing is also frustrating--they don&#x27;t apply volume discounting until you&#x27;re pushing something like 500 GB of logs each month.   Again, we need affordable analytics; storage is a small piece of the puzzle.<p>Honestly, our next move may be to an internal &quot;HEK&quot; stack: Heka, Elasticsearch, and Kibana.   I&#x27;ve looked at the cost of doing this and it&#x27;s actually more expensive when you consider what we&#x27;d spend to host a big ES cluster internally, but cost is not our #1 consideration, usability is.