Elastic
Depends
Confidence: Medium
Buy if you run large-scale search, log, or security data and have engineers to operate it.
Comparison
Elastic and OpenObserve both land on Depends.
Buy if you run large-scale search, log, or security data and have engineers to operate it.
Buy if you ingest heavy log volume, have DevOps capacity to self-host or patch, and want Datadog-level features at a fraction of the cost.
| Compare | Elastic | OpenObserve |
|---|---|---|
| Verdict | Depends | Depends |
| Best for | Large-scale app and site search | High-volume log teams bleeding money on Datadog |
| Who it's not for | Small teams needing simple search . massive overkill | Buyers needing genuine OSI open-source licensing, not open-core |
| Privacy | Known CVEs exist (info disclosure, DoS, code execution) plus one third-party supply-chain incident; Elastic runs a transparent product-security program.⁵ | Three published CVEs (SSRF, privilege escalation, unauthorized access); active advisory process and trust center exist. |
| Support quality | No support evidence in sources reviewed | Reviewers report responsive team support |
| Public sentiment | G2 reviewers rate Elastic 4+ across 541 reviews and praise its observability and search power, while Reddit threads flag confusing pricing and operational weight.¹ | Users praise cost, ease, and scale on Reddit, G2, and Product Hunt; a vocal minority resents enterprise feature gating.12 |
| Biggest gotcha | Usage-based pricing hides real cost; one Reddit user called getting numbers 'bloody difficult'² | Open-core reality: some features require paid or enterprise licenses despite the public repo14 |