Logz.io website screenshot

Logz.io

Logz.io is a managed cloud observability platform built on the ELK Stack (Elasticsearch / Logstash / Kibana, plus OpenSearch and Grafana) that unifies log management, infrastructure monitoring, distributed tracing, and Cloud SIEM behind a consumption-based pricing model. The platform pairs an AI Agent layer for root-cause analysis with native OpenTelemetry, Prometheus, Grafana, and Perses compatibility, and exposes its entire control plane through a single OpenAPI 2.0-described public API covering search, alerting, sub-account management, security rules, parsing pipelines, archive / restore, and visualization-as-code via the Logz.io fork of Grafana and Perses.

Logz.io publishes 19 APIs on the APIs.io network, including Search Logs API, Archive and Restore API, Drop Filters API, and 16 more. Tagged areas include Observability, Logging, Metrics, Tracing, and SIEM.

The Logz.io catalog on APIs.io includes 1 JSON-LD context and 1 Spectral governance ruleset.

Logz.io’s developer surface includes developer portal, documentation, authentication, getting-started guide, engineering blog, changelog, support, and 72 more developer resources.

71.1/100 exemplar ▼ -6.0 Agent 28/100 agent aware Full breakdown ↓
scored 2026-07-28 · rubric v0.6
AccessPaid
19 APIs
ObservabilityLoggingMetricsTracingSIEMELKElasticsearchOpenSearchPrometheusGrafanaOpenTelemetryAIOpsCloud ObservabilityManaged ELKCost Management

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-28 · rubric v0.6
Composite quality — 71.1/100 · exemplar
Contract Quality 16.4 / 25
Developer Ergonomics 13.0 / 20
Commercial Clarity 18.4 / 20
Operational Transparency 8.9 / 13
Governance 7.0 / 12
Discoverability 7.4 / 10
Agent readiness — 28/100 · agent aware
Machine-Readable Contract 18 / 18
Agentic Access Contract 0 / 10
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/logz-io: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 19

Individual APIs this provider publishes, each with its own machine-readable definition.

Logz.io Search Logs API

Query indexed logs against the Logz.io managed Elasticsearch / OpenSearch cluster using a request body that mirrors the upstream Elasticsearch Search API. Includes `/v1/search` ...

Logz.io Archive and Restore API

Configure long-term archive destinations (S3, ADLS, Google Cloud Storage), test connectivity, list and delete archive settings, then restore archived logs back into Logz.io for ...

Logz.io Drop Filters API

Create, list, activate, deactivate, and delete drop filters that discard matching events before they enter Logz.io's hot index. The primary tool for trimming ingest volume and m...

Logz.io Alerts API

Manage Logz.io alert rules — create, retrieve, update, enable, disable, and delete log-based and multi-account alerts via `/v2/alerts`, list currently triggered alerts via `/v1/...

Logz.io Notification Endpoints API

Manage downstream notification destinations attached to alerts. Supports Slack, PagerDuty, Microsoft Teams, BigPanda, OpsGenie, ServiceNow, VictorOps, custom HTTPS webhooks, and...

Logz.io Users API

List, create, update, suspend, and delete users in the main account and across all associated sub-accounts. Includes authentication groups (SSO group-to-role mappings), the `who...

Logz.io Tokens API

Manage the three Logz.io credential types — API tokens (account control plane), log-shipping tokens (ingest authentication for shippers like Filebeat, Fluentd, OpenTelemetry, an...

Logz.io Accounts API

Provision and resize time-based log sub-accounts and metrics accounts. Lets owners split daily ingest quotas across environments, teams, or customers and reshape retention witho...

Logz.io Metrics Prometheus API

Prometheus-compatible read path against the Logz.io Infrastructure Monitoring backend. Implements `query`, `query_range`, `series`, `labels`, and `label/{name}/values` exactly a...

Logz.io Grafana API

Pass-through API to the Logz.io fork of Grafana plus a subset of upstream Grafana endpoints. Covers dashboards (`/api/dashboards`), folders, alert rules and silences (`/api/v1/p...

Logz.io Perses API

Logz.io's Perses-compatible dashboard API (Perses is the CNCF observability dashboard project Logz.io helps maintain). Manages projects, dashboards, global datasources, and the ...

Logz.io Cloud SIEM API

Logz.io Cloud SIEM control plane — manage detection rules (correlation and threshold), retrieve raised security events, and administer the SIEM sub-account. Backs the detect → t...

Logz.io Log Shipping API

Provision the Logz.io managed pull-side log shippers. Connect AWS CloudTrail streams and S3 buckets (with IAM assume-role) directly from the API so customers can stand up log co...

Logz.io Parsing Pipelines API

Manage Sawmill log-type pipelines and external mapping uploads. Sawmill is Logz.io's open-source JSON transformation engine; this API lets customers attach declarative parsing p...

Logz.io Lookup Lists API

CRUD for reference data used to enrich and filter logs and alerts. Customers upload lookup lists of IPs, hostnames, user IDs, or business identifiers and reference them by name ...

Logz.io Insights API

Retrieve the cognitive-insights and anomaly findings surfaced by Logz.io's AI observability layer. Returns ranked operational insights — Exceptions, Slow Transactions, Critical ...

Logz.io Deployment Markers API

Post deployment events into Logz.io as markers so they overlay on dashboards and contextual searches. The mechanism release pipelines use to correlate spikes in error logs or la...

Logz.io OpenSearch Snapshots API

Drive the OpenSearch / Kibana saved-object snapshot lifecycle inside Logz.io — import and export visualizations, searches, and dashboard objects programmatically. The promotion-...

Logz.io Audit Trail API

Query the Logz.io account-level audit trail and list the event types it emits. Customers wire this into their own SIEM or governance pipelines for ISO 27001 / SOC 2-style activi...

Scroll for all 19

Arazzo Workflows 13

Multi-step API workflows described with the Arazzo specification.

Logz.io Verify Token And Discover Accounts

Confirm which account a token belongs to, then list its associated accounts.

ARAZZO

Logz.io Alert Create, Update, And List

Create an alert, refine its threshold, then list all alerts to confirm it.

ARAZZO

Logz.io Alert Enable/Disable Lifecycle

Create an alert, disable it for a maintenance window, re-enable it, and verify.

ARAZZO

Logz.io Custom Webhook Endpoint Then Alert

Create a custom webhook notification endpoint and an alert that routes to it.

ARAZZO

Logz.io Grafana Dashboard In New Folder

Create a Grafana folder, save a dashboard into it, and read it back by uid.

ARAZZO

Logz.io Notification Endpoint Cleanup

List notification endpoints, confirm one by id, and delete it.

ARAZZO

Logz.io Notification Endpoint Then Alert

Create a Slack notification endpoint, then wire a new alert to notify it.

ARAZZO

Logz.io Grafana Contact Point Setup

Create a Grafana contact point, confirm it by name, and list alert rules.

ARAZZO

Logz.io Metrics Explore And Query

Discover label names, list matching series, then run an instant PromQL query.

ARAZZO

Logz.io Search Then Scroll Logs

Run a log search, then open a scroll to page through the full result set.

ARAZZO

Logz.io Sub Account Cleanup

List sub accounts, fetch one by id to confirm, and delete it.

ARAZZO

Logz.io Provision a Sub Account

Create a time-based log sub account, read it back, and adjust its retention.

ARAZZO

Logz.io Upsert an Alert

Find an alert by title and update it if it exists, otherwise create it.

ARAZZO

Scroll for all 13

GraphQL 1

GraphQL schemas published by this provider.

Logz.io GraphQL Schema

Conceptual GraphQL schema for the Logz.io cloud observability platform. Logz.io unifies log management, infrastructure metrics, distributed tracing, and Cloud SIEM behind a sing...

GRAPHQL

Pricing Plans 1

Published pricing tiers and plan structures.

Logz Io Plans Pricing

7 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Logz Io Rate Limits

1 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

Logz Io Context

0 classes · 40 properties

JSON-LD

Spectral Rules 1

Spectral governance rulesets for linting and validating these APIs.

Logz.io API Rules

5 rules · 3 warnings 2 info

SPECTRAL

JSON Schema 4

Standalone JSON Schema definitions for this provider's data models.

Logz.io Alert Rule

10 properties

JSON SCHEMA

Logz.io Log Document

16 properties

JSON SCHEMA

Logz.io Metric Sample

3 properties

JSON SCHEMA

Logz.io Search Request

8 properties

JSON SCHEMA

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Logz Io Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Logz Io Trust Center

SOC 2, HIPAA, FedRAMP

SECURITY

Resources

Get Started 3

Portal, sign-up, and the first successful call

Documentation 6

Reference material describing how the API behaves

Design & Contract 14

Pagination, idempotency, versioning, errors, and events

Scroll for all 14

Build 24

SDKs, sample code, and the tooling you integrate with

Scroll for all 24

Access & Security 5

Authentication, authorization, and security posture

Learn 3

Tutorials, courses, talks, and written guidance

Operate 7

Status, limits, changes, and where to get help

Scroll for all 7

Commercial 7

Pricing, plans, and the legal terms of use

Scroll for all 7

Company 6

The organization behind the API

Other 4

Properties that don't map to a standard resource type

Source (apis.yml)

apis.yml Raw ↑
aid: logz-io
url: https://raw.githubusercontent.com/api-evangelist/logz-io/refs/heads/main/apis.yml
apis:
- aid: logz-io:logz-io-search-logs-api
  name: Logz.io Search Logs API
  tags:
  - Observability
  - Logging
  - Search
  - ELK
  humanURL: https://api-docs.logz.io/docs/logz/search/
  baseURL: https://api.logz.io/v1/search
  properties:
  - url: https://api-docs.logz.io/docs/logz/search/
    type: Documentation
  - url: https://docs.logz.io/api/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  - url: json-schema/logz-io-search-request-schema.json
    type: JSONSchema
  - url: json-schema/logz-io-log-document-schema.json
    type: JSONSchema
  - url: json-ld/logz-io-context.jsonld
    type: JSONLD
  - url: graphql/logz-io-graphql.md
    type: GraphQL
  description: Query indexed logs against the Logz.io managed Elasticsearch / OpenSearch cluster using a request body that
    mirrors the upstream Elasticsearch Search API. Includes `/v1/search` for ad-hoc queries and `/v1/scroll` for iterating
    large result sets. Returns full Lucene-style hits, aggregations, and Elasticsearch metadata, enabling Kibana-equivalent
    search semantics over Logz.io-hosted indices.
- aid: logz-io:logz-io-archive-restore-api
  name: Logz.io Archive and Restore API
  tags:
  - Observability
  - Logging
  - Archival
  - S3
  humanURL: https://api-docs.logz.io/docs/logz/archive-logs/
  baseURL: https://api.logz.io/v2/archive
  properties:
  - url: https://api-docs.logz.io/docs/logz/archive-logs/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  description: Configure long-term archive destinations (S3, ADLS, Google Cloud Storage), test connectivity, list and delete
    archive settings, then restore archived logs back into Logz.io for replay or compliance review. Backs Logz.io's tiered
    retention strategy of moving cold logs out of hot indices into customer-owned object storage.
- aid: logz-io:logz-io-drop-filters-api
  name: Logz.io Drop Filters API
  tags:
  - Observability
  - Logging
  - Data Optimization
  - Cost Management
  humanURL: https://api-docs.logz.io/docs/logz/drop-filters/
  baseURL: https://api.logz.io/v1/drop
  properties:
  - url: https://api-docs.logz.io/docs/logz/drop-filters/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  description: Create, list, activate, deactivate, and delete drop filters that discard matching events before they enter
    Logz.io's hot index. The primary tool for trimming ingest volume and managing observability cost at the platform edge
    without changing customer shippers.
- aid: logz-io:logz-io-alerts-api
  name: Logz.io Alerts API
  tags:
  - Observability
  - Alerting
  - Monitoring
  humanURL: https://api-docs.logz.io/docs/logz/get-all-alerts/
  baseURL: https://api.logz.io/v2/alerts
  properties:
  - url: https://api-docs.logz.io/docs/logz/get-all-alerts/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  - url: json-schema/logz-io-alert-rule-schema.json
    type: JSONSchema
  description: Manage Logz.io alert rules — create, retrieve, update, enable, disable, and delete log-based and multi-account
    alerts via `/v2/alerts`, list currently triggered alerts via `/v1/alerts/triggered-alerts`, and publish event markers.
    Powers the unified alerting experience across log, metric, and security signals.
- aid: logz-io:logz-io-notification-endpoints-api
  name: Logz.io Notification Endpoints API
  tags:
  - Observability
  - Alerting
  - Notifications
  - Webhooks
  humanURL: https://api-docs.logz.io/docs/logz/endpoints/
  baseURL: https://api.logz.io/v1/endpoints
  properties:
  - url: https://api-docs.logz.io/docs/logz/endpoints/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  description: Manage downstream notification destinations attached to alerts. Supports Slack, PagerDuty, Microsoft Teams,
    BigPanda, OpsGenie, ServiceNow, VictorOps, custom HTTPS webhooks, and email endpoints. Endpoints are decoupled from alert
    rules so a single destination can be reused across many alerts.
- aid: logz-io:logz-io-users-api
  name: Logz.io Users API
  tags:
  - Account Management
  - Users
  - Identity
  humanURL: https://api-docs.logz.io/docs/logz/manage-users/
  baseURL: https://api.logz.io/v1/user-management
  properties:
  - url: https://api-docs.logz.io/docs/logz/manage-users/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  description: List, create, update, suspend, and delete users in the main account and across all associated sub-accounts.
    Includes authentication groups (SSO group-to-role mappings), the `whoami` introspection endpoint, and `associated-accounts`
    for navigating the multi-account hierarchy.
- aid: logz-io:logz-io-tokens-api
  name: Logz.io Tokens API
  tags:
  - Account Management
  - Security
  - Credentials
  humanURL: https://api-docs.logz.io/docs/logz/manage-api-tokens/
  baseURL: https://api.logz.io/v1
  properties:
  - url: https://api-docs.logz.io/docs/logz/manage-api-tokens/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  description: Manage the three Logz.io credential types — API tokens (account control plane), log-shipping tokens (ingest
    authentication for shippers like Filebeat, Fluentd, OpenTelemetry, and the Logz.io agents), and shared tokens (cross-account
    read access). Returns token IDs only; secret values are emitted once at creation.
- aid: logz-io:logz-io-accounts-api
  name: Logz.io Accounts API
  tags:
  - Account Management
  - Sub-Accounts
  - Multi-Tenant
  humanURL: https://api-docs.logz.io/docs/logz/manage-time-based-log-accounts/
  baseURL: https://api.logz.io/v1/account-management
  properties:
  - url: https://api-docs.logz.io/docs/logz/manage-time-based-log-accounts/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  description: Provision and resize time-based log sub-accounts and metrics accounts. Lets owners split daily ingest quotas
    across environments, teams, or customers and reshape retention without re-shipping data. Includes the detailed view for
    time-based accounts with usage and quota.
- aid: logz-io:logz-io-metrics-prometheus-api
  name: Logz.io Metrics Prometheus API
  tags:
  - Observability
  - Metrics
  - Prometheus
  - PromQL
  humanURL: https://api-docs.logz.io/docs/logz/metrics-gateway/
  baseURL: https://api.logz.io/v1/metrics/prometheus/api/v1
  properties:
  - url: https://api-docs.logz.io/docs/logz/metrics-gateway/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  - url: json-schema/logz-io-metric-sample-schema.json
    type: JSONSchema
  description: Prometheus-compatible read path against the Logz.io Infrastructure Monitoring backend. Implements `query`,
    `query_range`, `series`, `labels`, and `label/{name}/values` exactly as upstream Prometheus, so existing Grafana data
    sources, alertmanagers, and PromQL tooling work unmodified against Logz.io-hosted metrics.
- aid: logz-io:logz-io-grafana-api
  name: Logz.io Grafana API
  tags:
  - Observability
  - Dashboards
  - Grafana
  - Visualization
  humanURL: https://api-docs.logz.io/docs/logz/grafana-alerting/
  baseURL: https://api.logz.io/v1/grafana/api
  properties:
  - url: https://api-docs.logz.io/docs/logz/grafana-alerting/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  description: Pass-through API to the Logz.io fork of Grafana plus a subset of upstream Grafana endpoints. Covers dashboards
    (`/api/dashboards`), folders, alert rules and silences (`/api/v1/provisioning/alert-rules`, `/api/alertmanager/grafana/api/v2/silences`),
    annotations, contact points, notification policies, datasource summaries, and dashboard snapshots. The portable way to
    manage Logz.io's metrics UI as code.
- aid: logz-io:logz-io-perses-api
  name: Logz.io Perses API
  tags:
  - Observability
  - Dashboards
  - Perses
  - CNCF
  humanURL: https://api-docs.logz.io/docs/logz/perses/
  baseURL: https://api.logz.io/perses-public/api/v1
  properties:
  - url: https://api-docs.logz.io/docs/logz/perses/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  description: Logz.io's Perses-compatible dashboard API (Perses is the CNCF observability dashboard project Logz.io helps
    maintain). Manages projects, dashboards, global datasources, and the Perses-flavored dashboard search/move operations
    alongside the Grafana surface — a forward-looking alternative for organizations standardizing on Perses-as-code.
- aid: logz-io:logz-io-cloud-siem-api
  name: Logz.io Cloud SIEM API
  tags:
  - Security
  - SIEM
  - Cloud SIEM
  - Threat Detection
  humanURL: https://api-docs.logz.io/docs/logz/security-rules/
  baseURL: https://api.logz.io/v2/security
  properties:
  - url: https://api-docs.logz.io/docs/logz/security-rules/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  description: Logz.io Cloud SIEM control plane — manage detection rules (correlation and threshold), retrieve raised security
    events, and administer the SIEM sub-account. Backs the detect → triage → respond workflow of Logz.io's MITRE ATT&CK-aligned
    managed SIEM offering, including pre-built rule packs and analyst worklists.
- aid: logz-io:logz-io-log-shipping-api
  name: Logz.io Log Shipping API
  tags:
  - Observability
  - Data Ingestion
  - AWS
  - CloudTrail
  - S3
  humanURL: https://api-docs.logz.io/docs/logz/connect-to-cloud-trail/
  baseURL: https://api.logz.io/v1/log-shipping
  properties:
  - url: https://api-docs.logz.io/docs/logz/connect-to-cloud-trail/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  description: Provision the Logz.io managed pull-side log shippers. Connect AWS CloudTrail streams and S3 buckets (with IAM
    assume-role) directly from the API so customers can stand up log collection without deploying agents on their AWS side.
- aid: logz-io:logz-io-parsing-pipelines-api
  name: Logz.io Parsing Pipelines API
  tags:
  - Observability
  - Logging
  - Parsing
  - Sawmill
  humanURL: https://api-docs.logz.io/docs/logz/parsing/
  baseURL: https://api.logz.io/v1/sawmill
  properties:
  - url: https://api-docs.logz.io/docs/logz/parsing/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  description: Manage Sawmill log-type pipelines and external mapping uploads. Sawmill is Logz.io's open-source JSON transformation
    engine; this API lets customers attach declarative parsing pipelines per log-type and inject field-mapping overrides before
    logs hit the index.
- aid: logz-io:logz-io-lookup-lists-api
  name: Logz.io Lookup Lists API
  tags:
  - Observability
  - Logging
  - Enrichment
  - Reference Data
  humanURL: https://api-docs.logz.io/docs/logz/lookups/
  baseURL: https://api.logz.io/v1/lookups
  properties:
  - url: https://api-docs.logz.io/docs/logz/lookups/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  description: CRUD for reference data used to enrich and filter logs and alerts. Customers upload lookup lists of IPs, hostnames,
    user IDs, or business identifiers and reference them by name in alerts and queries, keeping SIEM and operational rules
    data-driven.
- aid: logz-io:logz-io-insights-api
  name: Logz.io Insights API
  tags:
  - Observability
  - AIOps
  - Insights
  humanURL: https://api-docs.logz.io/docs/logz/insights/
  baseURL: https://api.logz.io/v1/insights
  properties:
  - url: https://api-docs.logz.io/docs/logz/insights/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  description: Retrieve the cognitive-insights and anomaly findings surfaced by Logz.io's AI observability layer. Returns
    ranked operational insights — Exceptions, Slow Transactions, Critical Events — for downstream automation and ticketing.
- aid: logz-io:logz-io-deployments-api
  name: Logz.io Deployment Markers API
  tags:
  - Observability
  - Deployments
  - DevOps
  humanURL: https://api-docs.logz.io/docs/logz/deployments/
  baseURL: https://api.logz.io/v2/markers
  properties:
  - url: https://api-docs.logz.io/docs/logz/deployments/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  description: Post deployment events into Logz.io as markers so they overlay on dashboards and contextual searches. The mechanism
    release pipelines use to correlate spikes in error logs or latency with the deployment that caused them.
- aid: logz-io:logz-io-snapshots-api
  name: Logz.io OpenSearch Snapshots API
  tags:
  - Observability
  - Logging
  - Backup
  - OpenSearch
  humanURL: https://api-docs.logz.io/docs/logz/snapshots/
  baseURL: https://api.logz.io
  properties:
  - url: https://api-docs.logz.io/docs/logz/snapshots/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  description: Drive the OpenSearch / Kibana saved-object snapshot lifecycle inside Logz.io — import and export visualizations,
    searches, and dashboard objects programmatically. The promotion-path used to ship Kibana content between Logz.io sub-accounts
    via CI.
- aid: logz-io:logz-io-audit-trail-api
  name: Logz.io Audit Trail API
  tags:
  - Compliance
  - Audit
  - Governance
  humanURL: https://api-docs.logz.io/docs/logz/retrieve-audit-trail/
  baseURL: https://api.logz.io/v1/audit-trail
  properties:
  - url: https://api-docs.logz.io/docs/logz/retrieve-audit-trail/
    type: Documentation
  - url: openapi/logz-io-api-openapi.yml
    type: OpenAPI
  description: Query the Logz.io account-level audit trail and list the event types it emits. Customers wire this into their
    own SIEM or governance pipelines for ISO 27001 / SOC 2-style activity tracking over Logz.io platform actions.
name: Logz.io
tags:
- Observability
- Logging
- Metrics
- Tracing
- SIEM
- ELK
- Elasticsearch
- OpenSearch
- Prometheus
- Grafana
- OpenTelemetry
- AIOps
- Cloud Observability
- Managed ELK
- Cost Management
kind: contract
accessModel:
  pricing: paid
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Paid
  confidence: medium
  source:
  - plans
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/logz-io.png
access: 3rd-Party
common:
- type: TrustCenter
  url: security/logz-io-trust-center.yml
- type: DomainSecurity
  url: security/logz-io-domain-security.yml
- type: PostmanWorkspace
  url: https://www.postman.com/kinlaneapi/logzio/overview
- type: Arazzo
  url: arazzo/logz-io-account-verify-workflow.yml
  name: Logz.io Verify Token And Discover Accounts
- type: Arazzo
  url: arazzo/logz-io-alert-create-update-list-workflow.yml
  name: Logz.io Alert Create, Update, And List
- type: Arazzo
  url: arazzo/logz-io-alert-lifecycle-workflow.yml
  name: Logz.io Alert Enable/Disable Lifecycle
- type: Arazzo
  url: arazzo/logz-io-custom-endpoint-then-alert-workflow.yml
  name: Logz.io Custom Webhook Endpoint Then Alert
- type: Arazzo
  url: arazzo/logz-io-dashboard-in-folder-workflow.yml
  name: Logz.io Grafana Dashboard In New Folder
- type: Arazzo
  url: arazzo/logz-io-endpoint-cleanup-workflow.yml
  name: Logz.io Notification Endpoint Cleanup
- type: Arazzo
  url: arazzo/logz-io-endpoint-then-alert-workflow.yml
  name: Logz.io Notification Endpoint Then Alert
- type: Arazzo
  url: arazzo/logz-io-grafana-contact-point-workflow.yml
  name: Logz.io Grafana Contact Point Setup
- type: Arazzo
  url: arazzo/logz-io-metrics-explore-workflow.yml
  name: Logz.io Metrics Explore And Query
- type: Arazzo
  url: arazzo/logz-io-search-then-scroll-workflow.yml
  name: Logz.io Search Then Scroll Logs
- type: Arazzo
  url: arazzo/logz-io-subaccount-cleanup-workflow.yml
  name: Logz.io Sub Account Cleanup
- type: Arazzo
  url: arazzo/logz-io-subaccount-provision-workflow.yml
  name: Logz.io Provision a Sub Account
- type: Arazzo
  url: arazzo/logz-io-upsert-alert-workflow.yml
  name: Logz.io Upsert an Alert
- url: https://logz.io/
  name: Logz.io
  type: Portal
- url: https://app.logz.io/
  name: Logz.io App
  type: Login
- url: https://docs.logz.io/
  name: Logz.io Documentation
  type: Documentation
- url: https://docs.logz.io/api/
  name: Logz.io API Documentation
  type: Documentation
- url: https://api-docs.logz.io/docs/logz/logz-io-api
  name: Logz.io API Reference
  type: Documentation
- url: https://app.logz.io/#/dashboard/settings/manage-tokens/api
  name: API Token Management
  type: Authentication
- url: https://docs.logz.io/user-guide/accounts/account-region.html
  name: Account Region
  type: Regions
- url: https://docs.logz.io/user-guide/giveittome/
  name: Getting Started
  type: GettingStarted
- url: https://logz.io/about-us/terms-of-use/
  name: Terms of Use
  type: TermsOfService
- url: https://logz.io/about-us/privacy-policy/
  name: Privacy Policy
  type: PrivacyPolicy
- url: https://logz.io/learn/security-and-compliance/
  name: Security and Compliance
  type: Security
- url: https://logz.io/trust-center/
  name: Trust Center
  type: TrustCenter
- url: https://status.logz.io/
  name: Logz.io Status
  type: StatusPage
- url: https://logz.io/blog/
  name: Logz.io Blog
  type: Blog
- url: https://logz.io/blog/category/news/
  name: Logz.io Release Notes
  type: ChangeLog
- url: https://logz.io/support/
  name: Logz.io Support
  type: Support
- url: https://docs.logz.io/contact-support.html
  name: Help Center
  type: Support
- url: https://logz.io/about/contact-us/
  name: Contact Us
  type: ContactUs
- url: https://github.com/logzio
  name: Logz.io GitHub Organization
  type: GitHubOrganization
- url: https://www.linkedin.com/company/logz.io/
  name: Logz.io LinkedIn
  type: LinkedIn
- url: https://twitter.com/logzio
  name: Logz.io Twitter
  type: Twitter
- url: https://www.youtube.com/channel/UCRtxh4MS8gWQ8mTCnTcLZ-Q
  name: Logz.io YouTube
  type: YouTube
- url: https://logz.io/about-us/careers/
  name: Logz.io Careers
  type: Careers
- url: https://logz.io/about-us/
  name: About Logz.io
  type: AboutUs
- url: https://logz.io/about-us/forked-statement/
  name: Forked Statement
  type: License
- url: https://logz.io/customers/
  name: Logz.io Customers
  type: CaseStudies
- url: https://logz.io/partners/
  name: Logz.io Partners
  type: Partners
- url: https://logz.io/events/
  name: Logz.io Events
  type: Events
- url: https://docs.logz.io/integrations/
  name: Logz.io Integrations
  type: Integrations
- url: https://hub.docker.com/u/logzio
  name: Logz.io Docker Hub
  type: Containers
- url: https://docs.logz.io/integrations/terraform/
  name: Terraform Provider Documentation
  type: Documentation
- url: https://github.com/logzio/terraform-provider-logzio
  name: Terraform Provider for Logz.io
  type: Tools
- url: https://github.com/logzio/logzio_terraform_client
  name: Logz.io Go Terraform Client
  type: SDKs
- url: https://github.com/logzio/logzio-go
  name: Logz.io Go SDK
  type: SDKs
- url: https://github.com/logzio/logzio-nodejs
  name: Logz.io Node.js Logger
  type: SDKs
- url: https://github.com/logzio/logzio-browser
  name: Logz.io Browser SDK
  type: SDKs
- url: https://github.com/logzio/logzio-java-sender
  name: Logz.io Java Sender
  type: SDKs
- url: https://github.com/logzio/logzio-dotnet
  name: Logz.io .NET Logger
  type: SDKs
- url: https://github.com/logzio/logzio-python-handler
  name: Logz.io Python Handler
  type: SDKs
- url: https://github.com/logzio/logzio-ruby
  name: Logz.io Ruby Client
  type: SDKs
- url: https://github.com/logzio/logzio-bunyan
  name: Logz.io Bunyan Stream
  type: SDKs
- url: https://github.com/logzio/logzio-log4j2-appender
  name: Logz.io Log4j2 Appender
  type: SDKs
- url: https://github.com/logzio/logzio-logback-appender
  name: Logz.io Logback Appender
  type: SDKs
- url: https://github.com/logzio/jaeger-logzio
  name: Jaeger Storage Integration
  type: Integrations
- url: https://github.com/logzio/zipkin-logzio
  name: Zipkin Storage Integration
  type: Integrations
- url: https://github.com/logzio/logzio-helm
  name: Logz.io Helm Charts
  type: Tools
- url: https://github.com/logzio/logzio-k8s
  name: Logz.io Kubernetes Integration
  type: Tools
- url: https://github.com/logzio/logzio_aws_serverless
  name: Logz.io AWS Serverless Lambda Shipper
  type: Tools
- url: https://github.com/logzio/logzio-azure-serverless
  name: Logz.io Azure Serverless Shipper
  type: Tools
- url: https://github.com/logzio/grafana-logzio-datasource
  name: Grafana Logz.io Data Source
  type: Tools
- url: https://github.com/logzio/docker-collector-logs
  name: Docker Logs Collector
  type: Tools
- url: https://github.com/logzio/docker-collector-metrics
  name: Docker Metrics Collector
  type: Tools
- url: https://github.com/logzio/docker-logging-plugin
  name: Docker Logging Driver Plugin
  type: Tools
- url: https://github.com/logzio/fluent-bit-logzio-output
  name: Fluent Bit Logz.io Output
  type: Tools
- url: https://github.com/logzio/sawmill
  name: Sawmill JSON Transformation Engine
  type: Tools
- url: https://github.com/logzio/logz-docs
  name: Logz.io Documentation Repository
  type: Documentation
- url: https://github.com/logzio/community
  name: Logz.io Community Integrations
  type: Community
- url: https://logz.io/learn/complete-guide-elk-stack/
  name: Complete Guide to the ELK Stack
  type: Learning
- url: https://logz.io/learn/
  name: Logz.io Learn
  type: Learning
- url: https://logz.io/pricing/
  data:
  - id: log-management
    name: Log Management
    type: Product
    entries:
    - geo: global
      unit: 1
      label: Ingested GB / day
      price: 0.92
      metric: gigabyte
      timeFrame: day
      description: Per-GB per-day ingest pricing for hot index storage with 3/7/14/30-day retention options.
    - geo: global
      unit: 1
      label: Hot tier retention extension
      price: 0.03
      metric: gigabyte
      timeFrame: day
      description: Per-GB per-day price to extend hot-tier retention beyond the base plan retention window.
    - geo: global
      unit: 1
      label: Warm tier retention extension
      price: 0.015
      metric: gigabyte
      timeFrame: day
      description: Per-GB per-day price for warm-tier retention extension.
    - geo: global
      unit: 1
      label: Cold tier retention
      price: 0.001
      metric: gigabyte
      timeFrame: day
      description: Per-GB per-day cold-tier price for long-tail compliance retention.
    elements:
    - name: Managed Elasticsearch / OpenSearch
    - name: Hot / warm / cold tiered storage
    - name: Drop filters for ingest optimization
    - name: Archive and restore to customer object storage
    - name: Kibana-equivalent UI
    description: Consumption-based managed ELK log management with tiered retention.
  - id: infrastructure-monitoring
    name: Infrastructure Monitoring
    type: Product
    entries:
    - geo: global
      unit: 1000
      label: Time series / day
      price: 0.4
      metric: timeseries
      timeFrame: day
      description: Per-1,000 time series per-day pricing at 6 data-points-per-minute.
    elements:
    - name: 18 months retention
    - name: Prometheus-compatible query API
    - name: Managed Grafana
    - name: Managed Perses dashboards
    - name: PromQL alerting via Grafana provisioning
    description: Managed Prometheus-compatible metrics with fixed 18-month retention.
  - id: distributed-tracing
    name: Distributed Tracing
    type: Product
    entries:
    - geo: global
      unit: 1000000
      label: Spans / day
      price: 0.16
      metric: span
      timeFrame: day
      description: Per-million spans per-day pricing for distributed tracing storage and query.
    elements:
    - name: 10 days retention
    - name: OpenTelemetry-native ingest
    - name: Jaeger and Zipkin compatible storage
    - name: AI-driven trace anomaly detection
    description: Managed distributed tracing for OpenTelemetry, Jaeger, and Zipkin pipelines.
  - id: cloud-siem
    name: Cloud SIEM
    type: Product
    entries:
    - geo: global
      unit: 1
      label: Custom quote
      price: Call
      metric: account
      timeFrame: month
      description: Custom pricing for Cloud SIEM bundled with Log Management ingest.
    elements:
    - name: MITRE ATT&CK-aligned detection rules
    - name: Threat intelligence feeds
    - name: Pre-built security analytics dashboards
    - name: Audit-trail and compliance reporting
    description: Cloud SIEM offering layered on top of Log Management.
  - id: agentic-observability
    name: Agentic Observability (AI Agent)
    type: Product
    entries:
    - geo: global
      unit: 1000000
      label: Tokens
      price: 10
      metric: token
      timeFrame: usage
      description: Per-million-token usage-based pricing for the Logz.io AI Agent's root-cause analysis and workflow actions.
    elements:
    - name: AI-driven root cause analysis
    - name: Automated runbook generation
    - name: Cross-signal correlation (logs / metrics / traces)
    description: AI Agent capability that automates observability investigation workflows.
  - id: pro
    name: Pro Plan
    type: Tier
    entries:
    - geo: global
      unit: 1
      label: Account
      price: Call
      metric: account
      timeFrame: month
      description: Pro tier with full API access, standard SLAs, and standard support.
    elements:
    - name: Full Logz.io API access
    - name: Email and chat support
    - name: Drop filters and data optimization tools
    description: Mid-tier subscription suitable for production teams.
  - id: enterprise
    name: Enterprise Plan
    type: Tier
    entries:
    - geo: global
      unit: 1
      label: Account
      price: Call
      metric: account
      timeFrame: month
      description: Enterprise-tier subscription with custom commitments, dedicated CSM, and premium SLAs.
    elements:
    - name: Custom commitment-based pricing
    - name: Premium SLAs and 24/7 support
    - name: SOC 2 / ISO 27001 / HIPAA / PCI DSS aligned
    - name: SSO, RBAC, audit trail
    description: Enterprise tier with custom commitments and premium support.
  name: Plans
  type: Plans
- url: https://logz.io/pricing/
  data:
  - id: ingest-overage
    name: Ingest Overage
    type: Overage
    entries:
    - geo: global
      unit: 1
      label: Overage multiplier
      price: 1.4
      metric: multiplier
      timeFrame: usage
      description: Usage above the committed plan is billed at 1.4x the subscription unit rate.
  - id: monthly-billing-uplift
    name: Monthly Billing Uplift
    type: Modifier
    entries:
    - geo: global
      unit: 1
      label: Monthly billing multiplier
      price: 1.2
      metric: multiplier
      timeFrame: month
      description: Monthly billing is 1.2x the equivalent annual commitment.
  name: Pricing
  type: Pricing
- url: openapi/logz-io-api-openapi.yml
  name: Logz.io OpenAPI
  type: OpenAPI
- url: plans/logz-io-plans-pricing.yml
  name: Logz.io Plans (API Commons Plans 0.1)
  type: Plans
- url: rate-limits/logz-io-rate-limits.yml
  name: Logz.io Rate Limits (API Commons Rate Limits 0.1)
  type: RateLimits
- url: finops/logz-io-finops.yml
  name: Logz.io FinOps (FOCUS aligned)
  type: FinOps
- url: json-ld/logz-io-context.jsonld
  name: Logz.io JSON-LD Context
  type: JSONLD
maintainers:
- FN: Kin Lane
  url: https://kinlane.com
  email: info@apievangelist.com
created: '2026-05-25'
modified: '2026-05-25'
specificationVersion: '0.16'
description: Logz.io is a managed cloud observability platform built on the ELK Stack (Elasticsearch / Logstash / Kibana,
  plus OpenSearch and Grafana) that unifies log management, infrastructure monitoring, distributed tracing, and Cloud SIEM
  behind a consumption-based pricing model. The platform pairs an AI Agent layer for root-cause analysis with native OpenTelemetry,
  Prometheus, Grafana, and Perses compatibility, and exposes its entire control plane through a single OpenAPI 2.0-described
  public API covering search, alerting, sub-account management, security rules, parsing pipelines, archive / restore, and
  visualization-as-code via the Logz.io fork of Grafana and Perses.