+1 on elastic search. We swapped splunk out for es + some inhouse pipelines and it's been a decent replacement. It's not 100% the same. We can't throw random

+1 on elastic search. We swapped splunk out for es + some inhouse pipelines and it's been a decent replacement. It's not 100% the same. We can't throw random garbage logs at it and create structure, we pushed structured logging onto service owners, but it's covered a lot of our common use cases e.g. what happened with this request? We haven't moved off of splunk for all of our logs, but have reduced the volume going there significantly.