Logz.io

aid: logz-io
url: https://raw.githubusercontent.com/api-evangelist/logz-io/refs/heads/main/apis.yml
apis:
  - aid: logz-io:logz-io-search-logs-api
    name: Logz.io Search Logs API
    tags:
      - Observability
      - Logging
      - Search
      - ELK
    humanURL: https://api-docs.logz.io/docs/logz/search/
    baseURL: https://api.logz.io/v1/search
    properties:
      - url: https://api-docs.logz.io/docs/logz/search/
        type: Documentation
      - url: https://docs.logz.io/api/
        type: Documentation
      - url: openapi/logz-io-api-openapi.yml
        type: OpenAPI
      - url: json-schema/logz-io-search-request-schema.json
        type: JSONSchema
      - url: json-schema/logz-io-log-document-schema.json
        type: JSONSchema
      - url: json-ld/logz-io-context.jsonld
        type: JSONLD
    description: >-
      Query indexed logs against the Logz.io managed Elasticsearch / OpenSearch cluster using a request body that
      mirrors the upstream Elasticsearch Search API. Includes `/v1/search` for ad-hoc queries and `/v1/scroll` for
      iterating large result sets. Returns full Lucene-style hits, aggregations, and Elasticsearch metadata, enabling
      Kibana-equivalent search semantics over Logz.io-hosted indices.
  - aid: logz-io:logz-io-archive-restore-api
    name: Logz.io Archive and Restore API
    tags:
      - Observability
      - Logging
      - Archival
      - S3
    humanURL: https://api-docs.logz.io/docs/logz/archive-logs/
    baseURL: https://api.logz.io/v2/archive
    properties:
      - url: https://api-docs.logz.io/docs/logz/archive-logs/
        type: Documentation
      - url: openapi/logz-io-api-openapi.yml
        type: OpenAPI
    description: >-
      Configure long-term archive destinations (S3, ADLS, Google Cloud Storage), test connectivity, list and delete
      archive settings, then restore archived logs back into Logz.io for replay or compliance review. Backs Logz.io's
      tiered retention strategy of moving cold logs out of hot indices into customer-owned object storage.
  - aid: logz-io:logz-io-drop-filters-api
    name: Logz.io Drop Filters API
    tags:
      - Observability
      - Logging
      - Data Optimization
      - Cost Management
    humanURL: https://api-docs.logz.io/docs/logz/drop-filters/
    baseURL: https://api.logz.io/v1/drop
    properties:
      - url: https://api-docs.logz.io/docs/logz/drop-filters/
        type: Documentation
      - url: openapi/logz-io-api-openapi.yml
        type: OpenAPI
    description: >-
      Create, list, activate, deactivate, and delete drop filters that discard matching events before they enter
      Logz.io's hot index. The primary tool for trimming ingest volume and managing observability cost at the platform
      edge without changing customer shippers.
  - aid: logz-io:logz-io-alerts-api
    name: Logz.io Alerts API
    tags:
      - Observability
      - Alerting
      - Monitoring
    humanURL: https://api-docs.logz.io/docs/logz/get-all-alerts/
    baseURL: https://api.logz.io/v2/alerts
    properties:
      - url: https://api-docs.logz.io/docs/logz/get-all-alerts/
        type: Documentation
      - url: openapi/logz-io-api-openapi.yml
        type: OpenAPI
      - url: json-schema/logz-io-alert-rule-schema.json
        type: JSONSchema
    description: >-
      Manage Logz.io alert rules — create, retrieve, update, enable, disable, and delete log-based and multi-account
      alerts via `/v2/alerts`, list currently triggered alerts via `/v1/alerts/triggered-alerts`, and publish event
      markers. Powers the unified alerting experience across log, metric, and security signals.
  - aid: logz-io:logz-io-notification-endpoints-api
    name: Logz.io Notification Endpoints API
    tags:
      - Observability
      - Alerting
      - Notifications
      - Webhooks
    humanURL: https://api-docs.logz.io/docs/logz/endpoints/
    baseURL: https://api.logz.io/v1/endpoints
    properties:
      - url: https://api-docs.logz.io/docs/logz/endpoints/
        type: Documentation
      - url: openapi/logz-io-api-openapi.yml
        type: OpenAPI
    description: >-
      Manage downstream notification destinations attached to alerts. Supports Slack, PagerDuty, Microsoft Teams,
      BigPanda, OpsGenie, ServiceNow, VictorOps, custom HTTPS webhooks, and email endpoints. Endpoints are decoupled
      from alert rules so a single destination can be reused across many alerts.
  - aid: logz-io:logz-io-users-api
    name: Logz.io Users API
    tags:
      - Account Management
      - Users
      - Identity
    humanURL: https://api-docs.logz.io/docs/logz/manage-users/
    baseURL: https://api.logz.io/v1/user-management
    properties:
      - url: https://api-docs.logz.io/docs/logz/manage-users/
        type: Documentation
      - url: openapi/logz-io-api-openapi.yml
        type: OpenAPI
    description: >-
      List, create, update, suspend, and delete users in the main account and across all associated sub-accounts.
      Includes authentication groups (SSO group-to-role mappings), the `whoami` introspection endpoint, and
      `associated-accounts` for navigating the multi-account hierarchy.
  - aid: logz-io:logz-io-tokens-api
    name: Logz.io Tokens API
    tags:
      - Account Management
      - Security
      - Credentials
    humanURL: https://api-docs.logz.io/docs/logz/manage-api-tokens/
    baseURL: https://api.logz.io/v1
    properties:
      - url: https://api-docs.logz.io/docs/logz/manage-api-tokens/
        type: Documentation
      - url: openapi/logz-io-api-openapi.yml
        type: OpenAPI
    description: >-
      Manage the three Logz.io credential types — API tokens (account control plane), log-shipping tokens (ingest
      authentication for shippers like Filebeat, Fluentd, OpenTelemetry, and the Logz.io agents), and shared tokens
      (cross-account read access). Returns token IDs only; secret values are emitted once at creation.
  - aid: logz-io:logz-io-accounts-api
    name: Logz.io Accounts API
    tags:
      - Account Management
      - Sub-Accounts
      - Multi-Tenant
    humanURL: https://api-docs.logz.io/docs/logz/manage-time-based-log-accounts/
    baseURL: https://api.logz.io/v1/account-management
    properties:
      - url: https://api-docs.logz.io/docs/logz/manage-time-based-log-accounts/
        type: Documentation
      - url: openapi/logz-io-api-openapi.yml
        type: OpenAPI
    description: >-
      Provision and resize time-based log sub-accounts and metrics accounts. Lets owners split daily ingest quotas
      across environments, teams, or customers and reshape retention without re-shipping data. Includes the detailed
      view for time-based accounts with usage and quota.
  - aid: logz-io:logz-io-metrics-prometheus-api
    name: Logz.io Metrics Prometheus API
    tags:
      - Observability
      - Metrics
      - Prometheus
      - PromQL
    humanURL: https://api-docs.logz.io/docs/logz/metrics-gateway/
    baseURL: https://api.logz.io/v1/metrics/prometheus/api/v1
    properties:
      - url: https://api-docs.logz.io/docs/logz/metrics-gateway/
        type: Documentation
      - url: openapi/logz-io-api-openapi.yml
        type: OpenAPI
      - url: json-schema/logz-io-metric-sample-schema.json
        type: JSONSchema
    description: >-
      Prometheus-compatible read path against the Logz.io Infrastructure Monitoring backend. Implements `query`,
      `query_range`, `series`, `labels`, and `label/{name}/values` exactly as upstream Prometheus, so existing Grafana
      data sources, alertmanagers, and PromQL tooling work unmodified against Logz.io-hosted metrics.
  - aid: logz-io:logz-io-grafana-api
    name: Logz.io Grafana API
    tags:
      - Observability
      - Dashboards
      - Grafana
      - Visualization
    humanURL: https://api-docs.logz.io/docs/logz/grafana-alerting/
    baseURL: https://api.logz.io/v1/grafana/api
    properties:
      - url: https://api-docs.logz.io/docs/logz/grafana-alerting/
        type: Documentation
      - url: openapi/logz-io-api-openapi.yml
        type: OpenAPI
    description: >-
      Pass-through API to the Logz.io fork of Grafana plus a subset of upstream Grafana endpoints. Covers dashboards
      (`/api/dashboards`), folders, alert rules and silences (`/api/v1/provisioning/alert-rules`,
      `/api/alertmanager/grafana/api/v2/silences`), annotations, contact points, notification policies, datasource
      summaries, and dashboard snapshots. The portable way to manage Logz.io's metrics UI as code.
  - aid: logz-io:logz-io-perses-api
    name: Logz.io Perses API
    tags:
      - Observability
      - Dashboards
      - Perses
      - CNCF
    humanURL: https://api-docs.logz.io/docs/logz/perses/
    baseURL: https://api.logz.io/perses-public/api/v1
    properties:
      - url: https://api-docs.logz.io/docs/logz/perses/
        type: Documentation
      - url: openapi/logz-io-api-openapi.yml
        type: OpenAPI
    description: >-
      Logz.io's Perses-compatible dashboard API (Perses is the CNCF observability dashboard project Logz.io helps
      maintain). Manages projects, dashboards, global datasources, and the Perses-flavored dashboard search/move
      operations alongside the Grafana surface — a forward-looking alternative for organizations standardizing on
      Perses-as-code.
  - aid: logz-io:logz-io-cloud-siem-api
    name: Logz.io Cloud SIEM API
    tags:
      - Security
      - SIEM
      - Cloud SIEM
      - Threat Detection
    humanURL: https://api-docs.logz.io/docs/logz/security-rules/
    baseURL: https://api.logz.io/v2/security
    properties:
      - url: https://api-docs.logz.io/docs/logz/security-rules/
        type: Documentation
      - url: openapi/logz-io-api-openapi.yml
        type: OpenAPI
    description: >-
      Logz.io Cloud SIEM control plane — manage detection rules (correlation and threshold), retrieve raised security
      events, and administer the SIEM sub-account. Backs the detect → triage → respond workflow of Logz.io's MITRE
      ATT&CK-aligned managed SIEM offering, including pre-built rule packs and analyst worklists.
  - aid: logz-io:logz-io-log-shipping-api
    name: Logz.io Log Shipping API
    tags:
      - Observability
      - Data Ingestion
      - AWS
      - CloudTrail
      - S3
    humanURL: https://api-docs.logz.io/docs/logz/connect-to-cloud-trail/
    baseURL: https://api.logz.io/v1/log-shipping
    properties:
      - url: https://api-docs.logz.io/docs/logz/connect-to-cloud-trail/
        type: Documentation
      - url: openapi/logz-io-api-openapi.yml
        type: OpenAPI
    description: >-
      Provision the Logz.io managed pull-side log shippers. Connect AWS CloudTrail streams and S3 buckets (with IAM
      assume-role) directly from the API so customers can stand up log collection without deploying agents on their AWS
      side.
  - aid: logz-io:logz-io-parsing-pipelines-api
    name: Logz.io Parsing Pipelines API
    tags:
      - Observability
      - Logging
      - Parsing
      - Sawmill
    humanURL: https://api-docs.logz.io/docs/logz/parsing/
    baseURL: https://api.logz.io/v1/sawmill
    properties:
      - url: https://api-docs.logz.io/docs/logz/parsing/
        type: Documentation
      - url: openapi/logz-io-api-openapi.yml
        type: OpenAPI
    description: >-
      Manage Sawmill log-type pipelines and external mapping uploads. Sawmill is Logz.io's open-source JSON
      transformation engine; this API lets customers attach declarative parsing pipelines per log-type and inject
      field-mapping overrides before logs hit the index.
  - aid: logz-io:logz-io-lookup-lists-api
    name: Logz.io Lookup Lists API
    tags:
      - Observability
      - Logging
      - Enrichment
      - Reference Data
    humanURL: https://api-docs.logz.io/docs/logz/lookups/
    baseURL: https://api.logz.io/v1/lookups
    properties:
      - url: https://api-docs.logz.io/docs/logz/lookups/
        type: Documentation
      - url: openapi/logz-io-api-openapi.yml
        type: OpenAPI
    description: >-
      CRUD for reference data used to enrich and filter logs and alerts. Customers upload lookup lists of IPs,
      hostnames, user IDs, or business identifiers and reference them by name in alerts and queries, keeping SIEM and
      operational rules data-driven.
  - aid: logz-io:logz-io-insights-api
    name: Logz.io Insights API
    tags:
      - Observability
      - AIOps
      - Insights
    humanURL: https://api-docs.logz.io/docs/logz/insights/
    baseURL: https://api.logz.io/v1/insights
    properties:
      - url: https://api-docs.logz.io/docs/logz/insights/
        type: Documentation
      - url: openapi/logz-io-api-openapi.yml
        type: OpenAPI
    description: >-
      Retrieve the cognitive-insights and anomaly findings surfaced by Logz.io's AI observability layer. Returns ranked
      operational insights — Exceptions, Slow Transactions, Critical Events — for downstream automation and ticketing.
  - aid: logz-io:logz-io-deployments-api
    name: Logz.io Deployment Markers API
    tags:
      - Observability
      - Deployments
      - DevOps
    humanURL: https://api-docs.logz.io/docs/logz/deployments/
    baseURL: https://api.logz.io/v2/markers
    properties:
      - url: https://api-docs.logz.io/docs/logz/deployments/
        type: Documentation
      - url: openapi/logz-io-api-openapi.yml
        type: OpenAPI
    description: >-
      Post deployment events into Logz.io as markers so they overlay on dashboards and contextual searches. The
      mechanism release pipelines use to correlate spikes in error logs or latency with the deployment that caused them.
  - aid: logz-io:logz-io-snapshots-api
    name: Logz.io OpenSearch Snapshots API
    tags:
      - Observability
      - Logging
      - Backup
      - OpenSearch
    humanURL: https://api-docs.logz.io/docs/logz/snapshots/
    baseURL: https://api.logz.io
    properties:
      - url: https://api-docs.logz.io/docs/logz/snapshots/
        type: Documentation
      - url: openapi/logz-io-api-openapi.yml
        type: OpenAPI
    description: >-
      Drive the OpenSearch / Kibana saved-object snapshot lifecycle inside Logz.io — import and export visualizations,
      searches, and dashboard objects programmatically. The promotion-path used to ship Kibana content between Logz.io
      sub-accounts via CI.
  - aid: logz-io:logz-io-audit-trail-api
    name: Logz.io Audit Trail API
    tags:
      - Compliance
      - Audit
      - Governance
    humanURL: https://api-docs.logz.io/docs/logz/retrieve-audit-trail/
    baseURL: https://api.logz.io/v1/audit-trail
    properties:
      - url: https://api-docs.logz.io/docs/logz/retrieve-audit-trail/
        type: Documentation
      - url: openapi/logz-io-api-openapi.yml
        type: OpenAPI
    description: >-
      Query the Logz.io account-level audit trail and list the event types it emits. Customers wire this into their own
      SIEM or governance pipelines for ISO 27001 / SOC 2-style activity tracking over Logz.io platform actions.
name: Logz.io
tags:
  - Observability
  - Logging
  - Metrics
  - Tracing
  - SIEM
  - ELK
  - Elasticsearch
  - OpenSearch
  - Prometheus
  - Grafana
  - OpenTelemetry
  - AIOps
  - Cloud Observability
  - Managed ELK
  - Cost Management
kind: contract
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
access: 3rd-Party
common:
  - type: PostmanWorkspace
    url: https://www.postman.com/kinlaneapi/logzio/overview
  - type: ArazzoWorkflows
    url: arazzo/
    workflows:
      - url: arazzo/logz-io-account-verify-workflow.yml
        name: Logz.io Verify Token And Discover Accounts
        summary: Confirm which account a token belongs to, then list its associated accounts.
      - url: arazzo/logz-io-alert-create-update-list-workflow.yml
        name: Logz.io Alert Create, Update, And List
        summary: Create an alert, refine its threshold, then list all alerts to confirm it.
      - url: arazzo/logz-io-alert-lifecycle-workflow.yml
        name: Logz.io Alert Enable/Disable Lifecycle
        summary: Create an alert, disable it for a maintenance window, re-enable it, and verify.
      - url: arazzo/logz-io-custom-endpoint-then-alert-workflow.yml
        name: Logz.io Custom Webhook Endpoint Then Alert
        summary: Create a custom webhook notification endpoint and an alert that routes to it.
      - url: arazzo/logz-io-dashboard-in-folder-workflow.yml
        name: Logz.io Grafana Dashboard In New Folder
        summary: Create a Grafana folder, save a dashboard into it, and read it back by uid.
      - url: arazzo/logz-io-endpoint-cleanup-workflow.yml
        name: Logz.io Notification Endpoint Cleanup
        summary: List notification endpoints, confirm one by id, and delete it.
      - url: arazzo/logz-io-endpoint-then-alert-workflow.yml
        name: Logz.io Notification Endpoint Then Alert
        summary: Create a Slack notification endpoint, then wire a new alert to notify it.
      - url: arazzo/logz-io-grafana-contact-point-workflow.yml
        name: Logz.io Grafana Contact Point Setup
        summary: Create a Grafana contact point, confirm it by name, and list alert rules.
      - url: arazzo/logz-io-metrics-explore-workflow.yml
        name: Logz.io Metrics Explore And Query
        summary: Discover label names, list matching series, then run an instant PromQL query.
      - url: arazzo/logz-io-search-then-scroll-workflow.yml
        name: Logz.io Search Then Scroll Logs
        summary: Run a log search, then open a scroll to page through the full result set.
      - url: arazzo/logz-io-subaccount-cleanup-workflow.yml
        name: Logz.io Sub Account Cleanup
        summary: List sub accounts, fetch one by id to confirm, and delete it.
      - url: arazzo/logz-io-subaccount-provision-workflow.yml
        name: Logz.io Provision a Sub Account
        summary: Create a time-based log sub account, read it back, and adjust its retention.
      - url: arazzo/logz-io-upsert-alert-workflow.yml
        name: Logz.io Upsert an Alert
        summary: Find an alert by title and update it if it exists, otherwise create it.
  - url: https://logz.io/
    name: Logz.io
    type: Portal
  - url: https://app.logz.io/
    name: Logz.io App
    type: Login
  - url: https://docs.logz.io/
    name: Logz.io Documentation
    type: Documentation
  - url: https://docs.logz.io/api/
    name: Logz.io API Documentation
    type: Documentation
  - url: https://api-docs.logz.io/docs/logz/logz-io-api
    name: Logz.io API Reference
    type: Documentation
  - url: https://app.logz.io/#/dashboard/settings/manage-tokens/api
    name: API Token Management
    type: Authentication
  - url: https://docs.logz.io/user-guide/accounts/account-region.html
    name: Account Region
    type: Regions
  - url: https://docs.logz.io/user-guide/giveittome/
    name: Getting Started
    type: GettingStarted
  - url: https://logz.io/about-us/terms-of-use/
    name: Terms of Use
    type: TermsOfService
  - url: https://logz.io/about-us/privacy-policy/
    name: Privacy Policy
    type: PrivacyPolicy
  - url: https://logz.io/learn/security-and-compliance/
    name: Security and Compliance
    type: Security
  - url: https://logz.io/trust-center/
    name: Trust Center
    type: TrustCenter
  - url: https://status.logz.io/
    name: Logz.io Status
    type: StatusPage
  - url: https://logz.io/blog/
    name: Logz.io Blog
    type: Blog
  - url: https://logz.io/blog/category/news/
    name: Logz.io Release Notes
    type: ChangeLog
  - url: https://logz.io/support/
    name: Logz.io Support
    type: Support
  - url: https://docs.logz.io/contact-support.html
    name: Help Center
    type: Support
  - url: https://logz.io/about/contact-us/
    name: Contact Us
    type: ContactUs
  - url: https://github.com/logzio
    name: Logz.io GitHub Organization
    type: GitHubOrganization
  - url: https://www.linkedin.com/company/logz.io/
    name: Logz.io LinkedIn
    type: LinkedIn
  - url: https://twitter.com/logzio
    name: Logz.io Twitter
    type: Twitter
  - url: https://www.youtube.com/channel/UCRtxh4MS8gWQ8mTCnTcLZ-Q
    name: Logz.io YouTube
    type: YouTube
  - url: https://logz.io/about-us/careers/
    name: Logz.io Careers
    type: Careers
  - url: https://logz.io/about-us/
    name: About Logz.io
    type: AboutUs
  - url: https://logz.io/about-us/forked-statement/
    name: Forked Statement
    type: License
  - url: https://logz.io/customers/
    name: Logz.io Customers
    type: CaseStudies
  - url: https://logz.io/partners/
    name: Logz.io Partners
    type: Partners
  - url: https://logz.io/events/
    name: Logz.io Events
    type: Events
  - url: https://docs.logz.io/integrations/
    name: Logz.io Integrations
    type: Integrations
  - url: https://hub.docker.com/u/logzio
    name: Logz.io Docker Hub
    type: Containers
  - url: https://docs.logz.io/integrations/terraform/
    name: Terraform Provider Documentation
    type: Documentation
  - url: https://github.com/logzio/terraform-provider-logzio
    name: Terraform Provider for Logz.io
    type: Tools
  - url: https://github.com/logzio/logzio_terraform_client
    name: Logz.io Go Terraform Client
    type: SDK
  - url: https://github.com/logzio/logzio-go
    name: Logz.io Go SDK
    type: SDK
  - url: https://github.com/logzio/logzio-nodejs
    name: Logz.io Node.js Logger
    type: SDK
  - url: https://github.com/logzio/logzio-browser
    name: Logz.io Browser SDK
    type: SDK
  - url: https://github.com/logzio/logzio-java-sender
    name: Logz.io Java Sender
    type: SDK
  - url: https://github.com/logzio/logzio-dotnet
    name: Logz.io .NET Logger
    type: SDK
  - url: https://github.com/logzio/logzio-python-handler
    name: Logz.io Python Handler
    type: SDK
  - url: https://github.com/logzio/logzio-ruby
    name: Logz.io Ruby Client
    type: SDK
  - url: https://github.com/logzio/logzio-bunyan
    name: Logz.io Bunyan Stream
    type: SDK
  - url: https://github.com/logzio/logzio-log4j2-appender
    name: Logz.io Log4j2 Appender
    type: SDK
  - url: https://github.com/logzio/logzio-logback-appender
    name: Logz.io Logback Appender
    type: SDK
  - url: https://github.com/logzio/jaeger-logzio
    name: Jaeger Storage Integration
    type: Integrations
  - url: https://github.com/logzio/zipkin-logzio
    name: Zipkin Storage Integration
    type: Integrations
  - url: https://github.com/logzio/logzio-helm
    name: Logz.io Helm Charts
    type: Tools
  - url: https://github.com/logzio/logzio-k8s
    name: Logz.io Kubernetes Integration
    type: Tools
  - url: https://github.com/logzio/logzio_aws_serverless
    name: Logz.io AWS Serverless Lambda Shipper
    type: Tools
  - url: https://github.com/logzio/logzio-azure-serverless
    name: Logz.io Azure Serverless Shipper
    type: Tools
  - url: https://github.com/logzio/grafana-logzio-datasource
    name: Grafana Logz.io Data Source
    type: Tools
  - url: https://github.com/logzio/docker-collector-logs
    name: Docker Logs Collector
    type: Tools
  - url: https://github.com/logzio/docker-collector-metrics
    name: Docker Metrics Collector
    type: Tools
  - url: https://github.com/logzio/docker-logging-plugin
    name: Docker Logging Driver Plugin
    type: Tools
  - url: https://github.com/logzio/fluent-bit-logzio-output
    name: Fluent Bit Logz.io Output
    type: Tools
  - url: https://github.com/logzio/sawmill
    name: Sawmill JSON Transformation Engine
    type: Tools
  - url: https://github.com/logzio/logz-docs
    name: Logz.io Documentation Repository
    type: Documentation
  - url: https://github.com/logzio/community
    name: Logz.io Community Integrations
    type: Community
  - url: https://logz.io/learn/complete-guide-elk-stack/
    name: Complete Guide to the ELK Stack
    type: Learning
  - url: https://logz.io/learn/
    name: Logz.io Learn
    type: Learning
  - url: https://logz.io/pricing/
    data:
      - id: log-management
        name: Log Management
        type: Product
        entries:
          - geo: global
            unit: 1
            label: Ingested GB / day
            price: 0.92
            metric: gigabyte
            timeFrame: day
            description: Per-GB per-day ingest pricing for hot index storage with 3/7/14/30-day retention options.
          - geo: global
            unit: 1
            label: Hot tier retention extension
            price: 0.03
            metric: gigabyte
            timeFrame: day
            description: Per-GB per-day price to extend hot-tier retention beyond the base plan retention window.
          - geo: global
            unit: 1
            label: Warm tier retention extension
            price: 0.015
            metric: gigabyte
            timeFrame: day
            description: Per-GB per-day price for warm-tier retention extension.
          - geo: global
            unit: 1
            label: Cold tier retention
            price: 0.001
            metric: gigabyte
            timeFrame: day
            description: Per-GB per-day cold-tier price for long-tail compliance retention.
        elements:
          - name: Managed Elasticsearch / OpenSearch
          - name: Hot / warm / cold tiered storage
          - name: Drop filters for ingest optimization
          - name: Archive and restore to customer object storage
          - name: Kibana-equivalent UI
        description: Consumption-based managed ELK log management with tiered retention.
      - id: infrastructure-monitoring
        name: Infrastructure Monitoring
        type: Product
        entries:
          - geo: global
            unit: 1000
            label: Time series / day
            price: 0.4
            metric: timeseries
            timeFrame: day
            description: Per-1,000 time series per-day pricing at 6 data-points-per-minute.
        elements:
          - name: 18 months retention
          - name: Prometheus-compatible query API
          - name: Managed Grafana
          - name: Managed Perses dashboards
          - name: PromQL alerting via Grafana provisioning
        description: Managed Prometheus-compatible metrics with fixed 18-month retention.
      - id: distributed-tracing
        name: Distributed Tracing
        type: Product
        entries:
          - geo: global
            unit: 1000000
            label: Spans / day
            price: 0.16
            metric: span
            timeFrame: day
            description: Per-million spans per-day pricing for distributed tracing storage and query.
        elements:
          - name: 10 days retention
          - name: OpenTelemetry-native ingest
          - name: Jaeger and Zipkin compatible storage
          - name: AI-driven trace anomaly detection
        description: Managed distributed tracing for OpenTelemetry, Jaeger, and Zipkin pipelines.
      - id: cloud-siem
        name: Cloud SIEM
        type: Product
        entries:
          - geo: global
            unit: 1
            label: Custom quote
            price: Call
            metric: account
            timeFrame: month
            description: Custom pricing for Cloud SIEM bundled with Log Management ingest.
        elements:
          - name: MITRE ATT&CK-aligned detection rules
          - name: Threat intelligence feeds
          - name: Pre-built security analytics dashboards
          - name: Audit-trail and compliance reporting
        description: Cloud SIEM offering layered on top of Log Management.
      - id: agentic-observability
        name: Agentic Observability (AI Agent)
        type: Product
        entries:
          - geo: global
            unit: 1000000
            label: Tokens
            price: 10
            metric: token
            timeFrame: usage
            description: Per-million-token usage-based pricing for the Logz.io AI Agent's root-cause analysis and workflow actions.
        elements:
          - name: AI-driven root cause analysis
          - name: Automated runbook generation
          - name: Cross-signal correlation (logs / metrics / traces)
        description: AI Agent capability that automates observability investigation workflows.
      - id: pro
        name: Pro Plan
        type: Tier
        entries:
          - geo: global
            unit: 1
            label: Account
            price: Call
            metric: account
            timeFrame: month
            description: Pro tier with full API access, standard SLAs, and standard support.
        elements:
          - name: Full Logz.io API access
          - name: Email and chat support
          - name: Drop filters and data optimization tools
        description: Mid-tier subscription suitable for production teams.
      - id: enterprise
        name: Enterprise Plan
        type: Tier
        entries:
          - geo: global
            unit: 1
            label: Account
            price: Call
            metric: account
            timeFrame: month
            description: Enterprise-tier subscription with custom commitments, dedicated CSM, and premium SLAs.
        elements:
          - name: Custom commitment-based pricing
          - name: Premium SLAs and 24/7 support
          - name: SOC 2 / ISO 27001 / HIPAA / PCI DSS aligned
          - name: SSO, RBAC, audit trail
        description: Enterprise tier with custom commitments and premium support.
    name: Plans
    type: Plans
  - url: https://logz.io/pricing/
    data:
      - id: ingest-overage
        name: Ingest Overage
        type: Overage
        entries:
          - geo: global
            unit: 1
            label: Overage multiplier
            price: 1.4
            metric: multiplier
            timeFrame: usage
            description: Usage above the committed plan is billed at 1.4x the subscription unit rate.
      - id: monthly-billing-uplift
        name: Monthly Billing Uplift
        type: Modifier
        entries:
          - geo: global
            unit: 1
            label: Monthly billing multiplier
            price: 1.2
            metric: multiplier
            timeFrame: month
            description: Monthly billing is 1.2x the equivalent annual commitment.
    name: Pricing
    type: Pricing
  - url: openapi/logz-io-api-openapi.yml
    name: Logz.io OpenAPI
    type: OpenAPI
  - url: plans/logz-io-plans-pricing.yml
    name: Logz.io Plans (API Commons Plans 0.1)
    type: Plans
  - url: rate-limits/logz-io-rate-limits.yml
    name: Logz.io Rate Limits (API Commons Rate Limits 0.1)
    type: RateLimits
  - url: finops/logz-io-finops.yml
    name: Logz.io FinOps (FOCUS aligned)
    type: FinOps
  - url: json-ld/logz-io-context.jsonld
    name: Logz.io JSON-LD Context
    type: JSONLD
maintainers:
  - FN: Kin Lane
    url: https://kinlane.com
    email: info@apievangelist.com
created: '2026-05-25'
modified: '2026-05-25'
specificationVersion: '0.16'
description: >-
  Logz.io is a managed cloud observability platform built on the ELK Stack (Elasticsearch / Logstash / Kibana, plus
  OpenSearch and Grafana) that unifies log management, infrastructure monitoring, distributed tracing, and Cloud SIEM
  behind a consumption-based pricing model. The platform pairs an AI Agent layer for root-cause analysis with native
  OpenTelemetry, Prometheus, Grafana, and Perses compatibility, and exposes its entire control plane through a single
  OpenAPI 2.0-described public API covering search, alerting, sub-account management, security rules, parsing pipelines,
  archive / restore, and visualization-as-code via the Logz.io fork of Grafana and Perses.