That's two separate dimensions. One is metrics vs. event logging. The other is consistency vs. availability. There's many types of logs, and you don't need t

That's two separate dimensions. One is metrics vs. event logging. The other is consistency vs. availability. There's many types of logs, and you don't need the consistency that'd be required for billing-related logs as for debug logs. Similarly you may have billing-related metrics (e.g. bandwidth usage) where consistency is important. > It's not a _time series_ problem, it's a problem of storage. Technically anything with a time dimension is a time series, so Splunk is a time series database. > In my experience the best solution is to use two separate systems for each case. I agree completely. There's at least two general problems here that need different approaches once you get beyond trivial scale.