Logz.io

aid: logz-io
url: https://raw.githubusercontent.com/api-evangelist/logz-io/refs/heads/main/apis.yml
apis:
- aid: logz-io:logz-io-search-logs-api
  name: Logz.io Search Logs API
  tags:
  - Observability
  - Logging
  - Search
  - ELK
  humanURL: https://api-docs.logz.io/docs/logz/search/
  baseURL: https://api.logz.io/v1/search
  properties:
  - url: https://api-docs.logz.io/docs/logz/search/
    type: Documentation
  - url: https://docs.logz.io/api/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  - type: NaftikoCapability
    url: capabilities/search-logs.yaml
  - url: json-schema/logz-io-search-request-schema.json
    type: JSONSchema
  - url: json-schema/logz-io-log-document-schema.json
    type: JSONSchema
  - url: json-ld/logz-io-context.jsonld
    type: JSONLD
  description: Query indexed logs against the Logz.io managed Elasticsearch / OpenSearch cluster using a request body
    that mirrors the upstream Elasticsearch Search API. Includes `/v1/search` for ad-hoc queries and `/v1/scroll`
    for iterating large result sets. Returns full Lucene-style hits, aggregations, and Elasticsearch metadata,
    enabling Kibana-equivalent search semantics over Logz.io-hosted indices.
- aid: logz-io:logz-io-archive-restore-api
  name: Logz.io Archive and Restore API
  tags:
  - Observability
  - Logging
  - Archival
  - S3
  humanURL: https://api-docs.logz.io/docs/logz/archive-logs/
  baseURL: https://api.logz.io/v2/archive
  properties:
  - url: https://api-docs.logz.io/docs/logz/archive-logs/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  - type: NaftikoCapability
    url: capabilities/archive-restore.yaml
  description: Configure long-term archive destinations (S3, ADLS, Google Cloud Storage), test connectivity, list
    and delete archive settings, then restore archived logs back into Logz.io for replay or compliance review.
    Backs Logz.io's tiered retention strategy of moving cold logs out of hot indices into customer-owned object
    storage.
- aid: logz-io:logz-io-drop-filters-api
  name: Logz.io Drop Filters API
  tags:
  - Observability
  - Logging
  - Data Optimization
  - Cost Management
  humanURL: https://api-docs.logz.io/docs/logz/drop-filters/
  baseURL: https://api.logz.io/v1/drop
  properties:
  - url: https://api-docs.logz.io/docs/logz/drop-filters/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  - type: NaftikoCapability
    url: capabilities/drop-filters.yaml
  description: Create, list, activate, deactivate, and delete drop filters that discard matching events before they
    enter Logz.io's hot index. The primary tool for trimming ingest volume and managing observability cost at
    the platform edge without changing customer shippers.
- aid: logz-io:logz-io-alerts-api
  name: Logz.io Alerts API
  tags:
  - Observability
  - Alerting
  - Monitoring
  humanURL: https://api-docs.logz.io/docs/logz/get-all-alerts/
  baseURL: https://api.logz.io/v2/alerts
  properties:
  - url: https://api-docs.logz.io/docs/logz/get-all-alerts/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  - type: NaftikoCapability
    url: capabilities/alerts.yaml
  - type: NaftikoCapability
    url: capabilities/triggered-alerts.yaml
  - url: json-schema/logz-io-alert-rule-schema.json
    type: JSONSchema
  description: Manage Logz.io alert rules — create, retrieve, update, enable, disable, and delete log-based and
    multi-account alerts via `/v2/alerts`, list currently triggered alerts via `/v1/alerts/triggered-alerts`, and
    publish event markers. Powers the unified alerting experience across log, metric, and security signals.
- aid: logz-io:logz-io-notification-endpoints-api
  name: Logz.io Notification Endpoints API
  tags:
  - Observability
  - Alerting
  - Notifications
  - Webhooks
  humanURL: https://api-docs.logz.io/docs/logz/endpoints/
  baseURL: https://api.logz.io/v1/endpoints
  properties:
  - url: https://api-docs.logz.io/docs/logz/endpoints/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  - type: NaftikoCapability
    url: capabilities/notification-endpoints.yaml
  description: Manage downstream notification destinations attached to alerts. Supports Slack, PagerDuty, Microsoft
    Teams, BigPanda, OpsGenie, ServiceNow, VictorOps, custom HTTPS webhooks, and email endpoints. Endpoints are
    decoupled from alert rules so a single destination can be reused across many alerts.
- aid: logz-io:logz-io-users-api
  name: Logz.io Users API
  tags:
  - Account Management
  - Users
  - Identity
  humanURL: https://api-docs.logz.io/docs/logz/manage-users/
  baseURL: https://api.logz.io/v1/user-management
  properties:
  - url: https://api-docs.logz.io/docs/logz/manage-users/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  - type: NaftikoCapability
    url: capabilities/users.yaml
  - type: NaftikoCapability
    url: capabilities/authentication-groups.yaml
  description: List, create, update, suspend, and delete users in the main account and across all associated sub-accounts.
    Includes authentication groups (SSO group-to-role mappings), the `whoami` introspection endpoint, and `associated-accounts`
    for navigating the multi-account hierarchy.
- aid: logz-io:logz-io-tokens-api
  name: Logz.io Tokens API
  tags:
  - Account Management
  - Security
  - Credentials
  humanURL: https://api-docs.logz.io/docs/logz/manage-api-tokens/
  baseURL: https://api.logz.io/v1
  properties:
  - url: https://api-docs.logz.io/docs/logz/manage-api-tokens/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  - type: NaftikoCapability
    url: capabilities/api-tokens.yaml
  - type: NaftikoCapability
    url: capabilities/log-shipping-tokens.yaml
  - type: NaftikoCapability
    url: capabilities/shared-tokens.yaml
  description: Manage the three Logz.io credential types — API tokens (account control plane), log-shipping tokens
    (ingest authentication for shippers like Filebeat, Fluentd, OpenTelemetry, and the Logz.io agents), and shared
    tokens (cross-account read access). Returns token IDs only; secret values are emitted once at creation.
- aid: logz-io:logz-io-accounts-api
  name: Logz.io Accounts API
  tags:
  - Account Management
  - Sub-Accounts
  - Multi-Tenant
  humanURL: https://api-docs.logz.io/docs/logz/manage-time-based-log-accounts/
  baseURL: https://api.logz.io/v1/account-management
  properties:
  - url: https://api-docs.logz.io/docs/logz/manage-time-based-log-accounts/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  - type: NaftikoCapability
    url: capabilities/time-based-accounts.yaml
  - type: NaftikoCapability
    url: capabilities/metrics-accounts.yaml
  description: Provision and resize time-based log sub-accounts and metrics accounts. Lets owners split daily ingest
    quotas across environments, teams, or customers and reshape retention without re-shipping data. Includes the
    detailed view for time-based accounts with usage and quota.
- aid: logz-io:logz-io-metrics-prometheus-api
  name: Logz.io Metrics Prometheus API
  tags:
  - Observability
  - Metrics
  - Prometheus
  - PromQL
  humanURL: https://api-docs.logz.io/docs/logz/metrics-gateway/
  baseURL: https://api.logz.io/v1/metrics/prometheus/api/v1
  properties:
  - url: https://api-docs.logz.io/docs/logz/metrics-gateway/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  - type: NaftikoCapability
    url: capabilities/metrics-prometheus.yaml
  - url: json-schema/logz-io-metric-sample-schema.json
    type: JSONSchema
  description: Prometheus-compatible read path against the Logz.io Infrastructure Monitoring backend. Implements
    `query`, `query_range`, `series`, `labels`, and `label/{name}/values` exactly as upstream Prometheus, so existing
    Grafana data sources, alertmanagers, and PromQL tooling work unmodified against Logz.io-hosted metrics.
- aid: logz-io:logz-io-grafana-api
  name: Logz.io Grafana API
  tags:
  - Observability
  - Dashboards
  - Grafana
  - Visualization
  humanURL: https://api-docs.logz.io/docs/logz/grafana-alerting/
  baseURL: https://api.logz.io/v1/grafana/api
  properties:
  - url: https://api-docs.logz.io/docs/logz/grafana-alerting/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  - type: NaftikoCapability
    url: capabilities/grafana-dashboards.yaml
  - type: NaftikoCapability
    url: capabilities/grafana-alerting.yaml
  - type: NaftikoCapability
    url: capabilities/grafana-folders.yaml
  description: Pass-through API to the Logz.io fork of Grafana plus a subset of upstream Grafana endpoints. Covers
    dashboards (`/api/dashboards`), folders, alert rules and silences (`/api/v1/provisioning/alert-rules`, `/api/alertmanager/grafana/api/v2/silences`),
    annotations, contact points, notification policies, datasource summaries, and dashboard snapshots. The portable
    way to manage Logz.io's metrics UI as code.
- aid: logz-io:logz-io-perses-api
  name: Logz.io Perses API
  tags:
  - Observability
  - Dashboards
  - Perses
  - CNCF
  humanURL: https://api-docs.logz.io/docs/logz/perses/
  baseURL: https://api.logz.io/perses-public/api/v1
  properties:
  - url: https://api-docs.logz.io/docs/logz/perses/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  - type: NaftikoCapability
    url: capabilities/perses-dashboards.yaml
  description: Logz.io's Perses-compatible dashboard API (Perses is the CNCF observability dashboard project Logz.io
    helps maintain). Manages projects, dashboards, global datasources, and the Perses-flavored dashboard search/move
    operations alongside the Grafana surface — a forward-looking alternative for organizations standardizing on
    Perses-as-code.
- aid: logz-io:logz-io-cloud-siem-api
  name: Logz.io Cloud SIEM API
  tags:
  - Security
  - SIEM
  - Cloud SIEM
  - Threat Detection
  humanURL: https://api-docs.logz.io/docs/logz/security-rules/
  baseURL: https://api.logz.io/v2/security
  properties:
  - url: https://api-docs.logz.io/docs/logz/security-rules/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  - type: NaftikoCapability
    url: capabilities/security-rules.yaml
  - type: NaftikoCapability
    url: capabilities/security-events.yaml
  - type: NaftikoCapability
    url: capabilities/security-account.yaml
  description: Logz.io Cloud SIEM control plane — manage detection rules (correlation and threshold), retrieve
    raised security events, and administer the SIEM sub-account. Backs the detect → triage → respond workflow
    of Logz.io's MITRE ATT&CK-aligned managed SIEM offering, including pre-built rule packs and analyst worklists.
- aid: logz-io:logz-io-log-shipping-api
  name: Logz.io Log Shipping API
  tags:
  - Observability
  - Data Ingestion
  - AWS
  - CloudTrail
  - S3
  humanURL: https://api-docs.logz.io/docs/logz/connect-to-cloud-trail/
  baseURL: https://api.logz.io/v1/log-shipping
  properties:
  - url: https://api-docs.logz.io/docs/logz/connect-to-cloud-trail/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  - type: NaftikoCapability
    url: capabilities/log-shipping-cloudtrail.yaml
  - type: NaftikoCapability
    url: capabilities/log-shipping-s3.yaml
  description: Provision the Logz.io managed pull-side log shippers. Connect AWS CloudTrail streams and S3 buckets
    (with IAM assume-role) directly from the API so customers can stand up log collection without deploying agents
    on their AWS side.
- aid: logz-io:logz-io-parsing-pipelines-api
  name: Logz.io Parsing Pipelines API
  tags:
  - Observability
  - Logging
  - Parsing
  - Sawmill
  humanURL: https://api-docs.logz.io/docs/logz/parsing/
  baseURL: https://api.logz.io/v1/sawmill
  properties:
  - url: https://api-docs.logz.io/docs/logz/parsing/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  - type: NaftikoCapability
    url: capabilities/parsing-pipelines.yaml
  description: Manage Sawmill log-type pipelines and external mapping uploads. Sawmill is Logz.io's open-source
    JSON transformation engine; this API lets customers attach declarative parsing pipelines per log-type and inject
    field-mapping overrides before logs hit the index.
- aid: logz-io:logz-io-lookup-lists-api
  name: Logz.io Lookup Lists API
  tags:
  - Observability
  - Logging
  - Enrichment
  - Reference Data
  humanURL: https://api-docs.logz.io/docs/logz/lookups/
  baseURL: https://api.logz.io/v1/lookups
  properties:
  - url: https://api-docs.logz.io/docs/logz/lookups/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  - type: NaftikoCapability
    url: capabilities/lookup-lists.yaml
  description: CRUD for reference data used to enrich and filter logs and alerts. Customers upload lookup lists
    of IPs, hostnames, user IDs, or business identifiers and reference them by name in alerts and queries, keeping
    SIEM and operational rules data-driven.
- aid: logz-io:logz-io-insights-api
  name: Logz.io Insights API
  tags:
  - Observability
  - AIOps
  - Insights
  humanURL: https://api-docs.logz.io/docs/logz/insights/
  baseURL: https://api.logz.io/v1/insights
  properties:
  - url: https://api-docs.logz.io/docs/logz/insights/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  - type: NaftikoCapability
    url: capabilities/insights.yaml
  description: Retrieve the cognitive-insights and anomaly findings surfaced by Logz.io's AI observability layer.
    Returns ranked operational insights — Exceptions, Slow Transactions, Critical Events — for downstream automation
    and ticketing.
- aid: logz-io:logz-io-deployments-api
  name: Logz.io Deployment Markers API
  tags:
  - Observability
  - Deployments
  - DevOps
  humanURL: https://api-docs.logz.io/docs/logz/deployments/
  baseURL: https://api.logz.io/v2/markers
  properties:
  - url: https://api-docs.logz.io/docs/logz/deployments/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  - type: NaftikoCapability
    url: capabilities/deployments-markers.yaml
  description: Post deployment events into Logz.io as markers so they overlay on dashboards and contextual searches.
    The mechanism release pipelines use to correlate spikes in error logs or latency with the deployment that caused
    them.
- aid: logz-io:logz-io-snapshots-api
  name: Logz.io OpenSearch Snapshots API
  tags:
  - Observability
  - Logging
  - Backup
  - OpenSearch
  humanURL: https://api-docs.logz.io/docs/logz/snapshots/
  baseURL: https://api.logz.io
  properties:
  - url: https://api-docs.logz.io/docs/logz/snapshots/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  - type: NaftikoCapability
    url: capabilities/snapshots.yaml
  description: Drive the OpenSearch / Kibana saved-object snapshot lifecycle inside Logz.io — import and export
    visualizations, searches, and dashboard objects programmatically. The promotion-path used to ship Kibana content
    between Logz.io sub-accounts via CI.
- aid: logz-io:logz-io-audit-trail-api
  name: Logz.io Audit Trail API
  tags:
  - Compliance
  - Audit
  - Governance
  humanURL: https://api-docs.logz.io/docs/logz/retrieve-audit-trail/
  baseURL: https://api.logz.io/v1/audit-trail
  properties:
  - url: https://api-docs.logz.io/docs/logz/retrieve-audit-trail/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  - type: NaftikoCapability
    url: capabilities/audit-trail.yaml
  description: Query the Logz.io account-level audit trail and list the event types it emits. Customers wire this
    into their own SIEM or governance pipelines for ISO 27001 / SOC 2-style activity tracking over Logz.io platform
    actions.
name: Logz.io
tags:
- Observability
- Logging
- Metrics
- Tracing
- SIEM
- ELK
- Elasticsearch
- OpenSearch
- Prometheus
- Grafana
- OpenTelemetry
- AIOps
- Cloud Observability
- Managed ELK
- Cost Management
kind: contract
image: https://kinlane-productions2.s3.amazonaws.com/apis-json/apis-json-logo.jpg
access: 3rd-Party
common:
- url: https://logz.io/
  name: Logz.io
  type: Portal
- url: https://app.logz.io/
  name: Logz.io App
  type: Login
- url: https://docs.logz.io/
  name: Logz.io Documentation
  type: Documentation
- url: https://docs.logz.io/api/
  name: Logz.io API Documentation
  type: Documentation
- url: https://api-docs.logz.io/docs/logz/logz-io-api
  name: Logz.io API Reference
  type: Documentation
- url: https://app.logz.io/#/dashboard/settings/manage-tokens/api
  name: API Token Management
  type: Authentication
- url: https://docs.logz.io/user-guide/accounts/account-region.html
  name: Account Region
  type: Regions
- url: https://docs.logz.io/user-guide/giveittome/
  name: Getting Started
  type: GettingStarted
- url: https://logz.io/about-us/terms-of-use/
  name: Terms of Use
  type: TermsOfService
- url: https://logz.io/about-us/privacy-policy/
  name: Privacy Policy
  type: PrivacyPolicy
- url: https://logz.io/learn/security-and-compliance/
  name: Security and Compliance
  type: Security
- url: https://logz.io/trust-center/
  name: Trust Center
  type: TrustCenter
- url: https://status.logz.io/
  name: Logz.io Status
  type: StatusPage
- url: https://logz.io/blog/
  name: Logz.io Blog
  type: Blog
- url: https://logz.io/blog/category/news/
  name: Logz.io Release Notes
  type: ChangeLog
- url: https://logz.io/support/
  name: Logz.io Support
  type: Support
- url: https://docs.logz.io/contact-support.html
  name: Help Center
  type: Support
- url: https://logz.io/about/contact-us/
  name: Contact Us
  type: ContactUs
- url: https://github.com/logzio
  name: Logz.io GitHub Organization
  type: GitHubOrganization
- url: https://www.linkedin.com/company/logz.io/
  name: Logz.io LinkedIn
  type: LinkedIn
- url: https://twitter.com/logzio
  name: Logz.io Twitter
  type: Twitter
- url: https://www.youtube.com/channel/UCRtxh4MS8gWQ8mTCnTcLZ-Q
  name: Logz.io YouTube
  type: YouTube
- url: https://logz.io/about-us/careers/
  name: Logz.io Careers
  type: Careers
- url: https://logz.io/about-us/
  name: About Logz.io
  type: AboutUs
- url: https://logz.io/about-us/forked-statement/
  name: Forked Statement
  type: License
- url: https://logz.io/customers/
  name: Logz.io Customers
  type: CaseStudies
- url: https://logz.io/partners/
  name: Logz.io Partners
  type: Partners
- url: https://logz.io/events/
  name: Logz.io Events
  type: Events
- url: https://docs.logz.io/integrations/
  name: Logz.io Integrations
  type: Integrations
- url: https://hub.docker.com/u/logzio
  name: Logz.io Docker Hub
  type: Containers
- url: https://docs.logz.io/integrations/terraform/
  name: Terraform Provider Documentation
  type: Documentation
- url: https://github.com/logzio/terraform-provider-logzio
  name: Terraform Provider for Logz.io
  type: Tools
- url: https://github.com/logzio/logzio_terraform_client
  name: Logz.io Go Terraform Client
  type: SDK
- url: https://github.com/logzio/logzio-go
  name: Logz.io Go SDK
  type: SDK
- url: https://github.com/logzio/logzio-nodejs
  name: Logz.io Node.js Logger
  type: SDK
- url: https://github.com/logzio/logzio-browser
  name: Logz.io Browser SDK
  type: SDK
- url: https://github.com/logzio/logzio-java-sender
  name: Logz.io Java Sender
  type: SDK
- url: https://github.com/logzio/logzio-dotnet
  name: Logz.io .NET Logger
  type: SDK
- url: https://github.com/logzio/logzio-python-handler
  name: Logz.io Python Handler
  type: SDK
- url: https://github.com/logzio/logzio-ruby
  name: Logz.io Ruby Client
  type: SDK
- url: https://github.com/logzio/logzio-bunyan
  name: Logz.io Bunyan Stream
  type: SDK
- url: https://github.com/logzio/logzio-log4j2-appender
  name: Logz.io Log4j2 Appender
  type: SDK
- url: https://github.com/logzio/logzio-logback-appender
  name: Logz.io Logback Appender
  type: SDK
- url: https://github.com/logzio/jaeger-logzio
  name: Jaeger Storage Integration
  type: Integrations
- url: https://github.com/logzio/zipkin-logzio
  name: Zipkin Storage Integration
  type: Integrations
- url: https://github.com/logzio/logzio-helm
  name: Logz.io Helm Charts
  type: Tools
- url: https://github.com/logzio/logzio-k8s
  name: Logz.io Kubernetes Integration
  type: Tools
- url: https://github.com/logzio/logzio_aws_serverless
  name: Logz.io AWS Serverless Lambda Shipper
  type: Tools
- url: https://github.com/logzio/logzio-azure-serverless
  name: Logz.io Azure Serverless Shipper
  type: Tools
- url: https://github.com/logzio/grafana-logzio-datasource
  name: Grafana Logz.io Data Source
  type: Tools
- url: https://github.com/logzio/docker-collector-logs
  name: Docker Logs Collector
  type: Tools
- url: https://github.com/logzio/docker-collector-metrics
  name: Docker Metrics Collector
  type: Tools
- url: https://github.com/logzio/docker-logging-plugin
  name: Docker Logging Driver Plugin
  type: Tools
- url: https://github.com/logzio/fluent-bit-logzio-output
  name: Fluent Bit Logz.io Output
  type: Tools
- url: https://github.com/logzio/sawmill
  name: Sawmill JSON Transformation Engine
  type: Tools
- url: https://github.com/logzio/logz-docs
  name: Logz.io Documentation Repository
  type: Documentation
- url: https://github.com/logzio/community
  name: Logz.io Community Integrations
  type: Community
- url: https://logz.io/learn/complete-guide-elk-stack/
  name: Complete Guide to the ELK Stack
  type: Learning
- url: https://logz.io/learn/
  name: Logz.io Learn
  type: Learning
- url: https://logz.io/pricing/
  data:
  - id: log-management
    name: Log Management
    type: Product
    entries:
    - geo: global
      unit: 1
      label: Ingested GB / day
      price: 0.92
      metric: gigabyte
      timeFrame: day
      description: Per-GB per-day ingest pricing for hot index storage with 3/7/14/30-day retention options.
    - geo: global
      unit: 1
      label: Hot tier retention extension
      price: 0.03
      metric: gigabyte
      timeFrame: day
      description: Per-GB per-day price to extend hot-tier retention beyond the base plan retention window.
    - geo: global
      unit: 1
      label: Warm tier retention extension
      price: 0.015
      metric: gigabyte
      timeFrame: day
      description: Per-GB per-day price for warm-tier retention extension.
    - geo: global
      unit: 1
      label: Cold tier retention
      price: 0.001
      metric: gigabyte
      timeFrame: day
      description: Per-GB per-day cold-tier price for long-tail compliance retention.
    elements:
    - name: Managed Elasticsearch / OpenSearch
    - name: Hot / warm / cold tiered storage
    - name: Drop filters for ingest optimization
    - name: Archive and restore to customer object storage
    - name: Kibana-equivalent UI
    description: Consumption-based managed ELK log management with tiered retention.
  - id: infrastructure-monitoring
    name: Infrastructure Monitoring
    type: Product
    entries:
    - geo: global
      unit: 1000
      label: Time series / day
      price: 0.40
      metric: timeseries
      timeFrame: day
      description: Per-1,000 time series per-day pricing at 6 data-points-per-minute.
    elements:
    - name: 18 months retention
    - name: Prometheus-compatible query API
    - name: Managed Grafana
    - name: Managed Perses dashboards
    - name: PromQL alerting via Grafana provisioning
    description: Managed Prometheus-compatible metrics with fixed 18-month retention.
  - id: distributed-tracing
    name: Distributed Tracing
    type: Product
    entries:
    - geo: global
      unit: 1000000
      label: Spans / day
      price: 0.16
      metric: span
      timeFrame: day
      description: Per-million spans per-day pricing for distributed tracing storage and query.
    elements:
    - name: 10 days retention
    - name: OpenTelemetry-native ingest
    - name: Jaeger and Zipkin compatible storage
    - name: AI-driven trace anomaly detection
    description: Managed distributed tracing for OpenTelemetry, Jaeger, and Zipkin pipelines.
  - id: cloud-siem
    name: Cloud SIEM
    type: Product
    entries:
    - geo: global
      unit: 1
      label: Custom quote
      price: Call
      metric: account
      timeFrame: month
      description: Custom pricing for Cloud SIEM bundled with Log Management ingest.
    elements:
    - name: MITRE ATT&CK-aligned detection rules
    - name: Threat intelligence feeds
    - name: Pre-built security analytics dashboards
    - name: Audit-trail and compliance reporting
    description: Cloud SIEM offering layered on top of Log Management.
  - id: agentic-observability
    name: Agentic Observability (AI Agent)
    type: Product
    entries:
    - geo: global
      unit: 1000000
      label: Tokens
      price: 10
      metric: token
      timeFrame: usage
      description: Per-million-token usage-based pricing for the Logz.io AI Agent's root-cause analysis and workflow
        actions.
    elements:
    - name: AI-driven root cause analysis
    - name: Automated runbook generation
    - name: Cross-signal correlation (logs / metrics / traces)
    description: AI Agent capability that automates observability investigation workflows.
  - id: pro
    name: Pro Plan
    type: Tier
    entries:
    - geo: global
      unit: 1
      label: Account
      price: Call
      metric: account
      timeFrame: month
      description: Pro tier with full API access, standard SLAs, and standard support.
    elements:
    - name: Full Logz.io API access
    - name: Email and chat support
    - name: Drop filters and data optimization tools
    description: Mid-tier subscription suitable for production teams.
  - id: enterprise
    name: Enterprise Plan
    type: Tier
    entries:
    - geo: global
      unit: 1
      label: Account
      price: Call
      metric: account
      timeFrame: month
      description: Enterprise-tier subscription with custom commitments, dedicated CSM, and premium SLAs.
    elements:
    - name: Custom commitment-based pricing
    - name: Premium SLAs and 24/7 support
    - name: SOC 2 / ISO 27001 / HIPAA / PCI DSS aligned
    - name: SSO, RBAC, audit trail
    description: Enterprise tier with custom commitments and premium support.
  name: Plans
  type: Plans
- url: https://logz.io/pricing/
  data:
  - id: ingest-overage
    name: Ingest Overage
    type: Overage
    entries:
    - geo: global
      unit: 1
      label: Overage multiplier
      price: 1.4
      metric: multiplier
      timeFrame: usage
      description: Usage above the committed plan is billed at 1.4x the subscription unit rate.
  - id: monthly-billing-uplift
    name: Monthly Billing Uplift
    type: Modifier
    entries:
    - geo: global
      unit: 1
      label: Monthly billing multiplier
      price: 1.2
      metric: multiplier
      timeFrame: month
      description: Monthly billing is 1.2x the equivalent annual commitment.
  name: Pricing
  type: Pricing
- url: openapi/logz-io-api-openapi.yml
  name: Logz.io OpenAPI
  type: OpenAPI
- url: plans/logz-io-plans-pricing.yml
  name: Logz.io Plans (API Commons Plans 0.1)
  type: Plans
- url: rate-limits/logz-io-rate-limits.yml
  name: Logz.io Rate Limits (API Commons Rate Limits 0.1)
  type: RateLimits
- url: finops/logz-io-finops.yml
  name: Logz.io FinOps (FOCUS aligned)
  type: FinOps
- url: json-ld/logz-io-context.jsonld
  name: Logz.io JSON-LD Context
  type: JSONLD
maintainers:
- FN: Kin Lane
  url: https://kinlane.com
  email: [email protected]
created: '2026-05-25'
modified: '2026-05-25'
specificationVersion: '0.16'
description: Logz.io is a managed cloud observability platform built on the ELK Stack (Elasticsearch / Logstash
  / Kibana, plus OpenSearch and Grafana) that unifies log management, infrastructure monitoring, distributed
  tracing, and Cloud SIEM behind a consumption-based pricing model. The platform pairs an AI Agent layer for root-cause
  analysis with native OpenTelemetry, Prometheus, Grafana, and Perses compatibility, and exposes its entire control
  plane through a single OpenAPI 2.0-described public API covering search, alerting, sub-account management, security
  rules, parsing pipelines, archive / restore, and visualization-as-code via the Logz.io fork of Grafana and Perses.