Observability: metrics, logs and traces
10
Glossary and sources
6 min read · Chapter 10 of 10
Words that mean something else here
| Term | What you'd assume | What it means here |
|---|---|---|
| Agent | An AI agent | Usually the collector software on a host; now also an AI agent, often on the same product page |
| Event | Something that happened | Honeycomb: a wide record (a span is one). Datadog: a log line or a change notification. Security: a SIEM record |
| Cardinality | A row count | The number of unique values of a label, and so the number of metric series |
| Custom metric | A metric you designed | At Datadog, any metric not from one of its integrations, counted per unique name and tag combination |
| Host | A server you own | A billing unit: a VM, a Kubernetes node, or a "host-equivalent" for containers |
| Ingest vs index | The same thing | Ingest is receiving data, priced per GB; indexing makes it searchable for a period, priced per event |
| Sampling | Taking a sample to inspect | Dropping data on purpose, by a rule |
| Pipeline | A CI/CD pipeline | A telemetry router that filters, samples and routes |
| Monitor | Watching something | Datadog's word for an alert rule. In compliance, transaction monitoring (Identity and trust) |
| SLO, SLA, SLI | Interchangeable | SLI is the measurement, SLO the internal target, SLA the contract with credits |
| Error budget | Money | The failure you're allowed (1 − the SLO) over a window |
| Burn rate | Startup cash burn | How fast the error budget is being spent; 1x is exactly on budget |
| Incident | One thing | A reliability incident, a security incident, or an SEC "cybersecurity incident" with a materiality test |
| Autonomous | Acts on its own | Usually "investigates without being asked"; few products merge and deploy without a person |
| Credit | A refund | An SLA service credit, or a prepaid unit of AI usage |
What surprised me
Placeholders in your voice, drafted from the research and the earlier guides. Rewrite each with your own moment.
"Observability is a tool you buy." Coming from payments, I pictured a product with a price. It turned out to be a set of choices about what to keep, and the same telemetry on the same vendor could cost three times as much depending on how much we indexed.
"Open standards end lock-in." OpenTelemetry made the collection portable. The dashboards, alert rules, query language and two years of history stayed exactly where they were.
"More data, fewer outages." The incidents that hurt were the ones where an alert fired and nobody looked, because it had fired falsely all month.
"Security and observability are merging." The deals say so. The revenue says the security vendors' SIEMs are still several times bigger than the observability vendors' security lines.
"This is a regulated industry like the others." There's no licence and no supervisor. The rules that bit were about what we'd written into the logs.
Sources
Undated entries were read on October 8, 2026; "search result" means seen only as a search snippet or summary. Company figures are self-reported unless they come from a filing or a regulator.
Standards, open source and research
- CNCF, OpenTelemetry's graduation (May 2026)
- OpenTelemetry: specification status; sampling; collector follow-up survey (2026); eBPF instrumentation goals for 2026; Governance Committee elections (2026, search result)
- ClickHouse, OpenTelemetry semantic conventions; Greptime, GenAI semantic conventions (May 2026, search result)
- Prometheus, Prometheus 3.0 (Nov 2024)
- Grafana Labs, Beyla donated to OpenTelemetry (May 2025); Elastic, profiling agent accepted by OpenTelemetry
- Chronosphere, Fluent Bit v4 (Apr 2025)
- Google SRE: Alerting on SLOs; Monitoring Distributed Systems; Being On-Call; Postmortem Culture
- AI root-cause benchmarks: OpenRCA (ICLR 2025, search result); OpenRCA 2.0 (2026, search result); ITBench (2025, search result); ITBench leaderboard (search result)
Rules and regulators
- OMB, M-26-14 on agency logging (May 2026); cloud.gov, M-21-31 compliance (search result)
- Data Protection Commission, €91 million fine on Meta (Sep 2024, search result)
- CNIL, logging recommendation (Oct 2021, search result)
- PCI DSS v4 requirement 10.5.1, control summary (search result)
- Hunton: California's cybersecurity audit regulations (2025, search result); HHS tracking guidance ruling (Jun 2024, search result)
- Baird Holm, HHS withdraws its appeal (2024, search result)
- Fierce Healthcare, HIPAA Security Rule pushed to July 2027 (search result)
- Latham & Watkins, EU Data Act switching requirements (Aug 2025, search result)
- SEC, petition comments on cyber disclosure, File 4-856 (2026, search result); Rane, the future of the SEC's cybersecurity rules (search result)
- FedRAMP: A-LIGN, FedRAMP 20x (2026, search result); Datadog, FedRAMP High (search result); Grafana Labs, FedRAMP High (Apr 2025, search result); Dynatrace, intent to pursue FedRAMP High (Jul 2026, search result)
Company filings and results
- Datadog: FY2025 10-K (Feb 2026); Q2 2026 results (Aug 2026); Q2 2026 earnings call transcript (Aug 2026); another Q2 2026 call transcript (Aug 2026); Q4 2025 call transcript (Feb 2026, search result); Q3 2025 call transcript (search result)
- Dynatrace: FY2026 10-K (year to March 2026); Nasdaq, Q4 FY26 call highlights (May 2026, search result)
- Dynatrace, Q1 FY27 results (Aug 2026); MarketBeat, Dynatrace Q1 call highlights (Aug 2026, search result)
- Elastic, Q1 FY27 results (Aug 2026, search result)
- Cisco: FY2026 results (Aug 2026); 10-Q for the quarter to April 2026
- PagerDuty, Q2 FY27 results (2026, search result)
- Palo Alto Networks: FY2026 10-K (Sep 2026); Chronosphere acquisition completed (Jan 2026); Chronosphere deal announcement (Nov 2025, search result); Zacks, XSIAM ARR (search result)
- CrowdStrike: Q2 FY27 results (Aug 2026, search result); Eastern Progress, Next-Gen SIEM momentum (search result); GovInfoSecurity, CrowdStrike buys Onum (Aug 2025, search result)
- SecurityWeek, SentinelOne to acquire Observo AI (Sep 2025, search result)
- Google, completes acquisition of Wiz (Mar 2026, search result); Wiz, runtime sensor (search result)
- Snowflake: Observe acquisition closed (2026); FY2026 10-K (search result)
Private companies and deals
- Cribl: $200 million ARR (Jan 2025); Axios Pro, $300 million ARR and secondary offering (Feb 2026); StockAnalysis profile (Sep 2026, search result); SaaSRise, Cribl buys Radiant Security's AI SOC technology (Aug 2026, search result)
- Grafana Labs, $400 million ARR and 7,000 customers (Sep 2025, search result)
- ClickHouse, $250 million ARR and 4,000 customers (May 2026, search result)
- Bloomberg Government, ClickHouse at $15 billion (Jan 2026, search result); ClickHouse, ClickStack in ClickHouse Cloud
- SecurityWeek, Coralogix raises $200 million at $1.6 billion (Jun 2026)
- The Next Web, Dash0's $110 million Series B (Mar 2026)
- SiliconANGLE, groundcover raises $100 million (Jul 2026)
- BigDATAwire, New Relic to be acquired by Francisco Partners and TPG (2023, search result)
- TechCrunch, incident.io raises $62 million (Apr 2025, search result)
- Freshworks, acquisition of FireHydrant (Dec 2025, search result)
- Atlassian, Opsgenie licensing; Grafana Labs, OnCall open source in maintenance mode (Mar 2025) and OnCall OSS docs
- TechCrunch, Resolve AI confirms $125 million raise (Feb 2026); BuiltIn NYC, Traversal raises $48 million (Jun 2025); Business Wire, Traversal strategic investment (Mar 2026, search result); Business Wire, Cleric launch (Dec 2025)
Pricing, product and legal pages
- Datadog: price list; Datadog for Startups; Infinite Cardinality Metrics (Jun 2026); custom metrics billing; billing; DDOT collector; Flex Frozen, Archive Search and CloudPrem (Jun 2025); sites (search result); March 2023 incident
- Dynatrace: pricing; Bluebox on Dynatrace Hub
- Bluebox: product and pricing
- Grafana Labs: pricing; startup program (Sep 2024); Grafana Cloud SLA
- New Relic: pricing; New Relic for Startups (Jun 2026); EU region (search result); service level commitment (search result)
- Splunk: Observability pricing; OpenTelemetry Collector distribution
- Honeycomb, pricing; incident.io, pricing; PagerDuty, incident management pricing (search result)
- AWS: CloudWatch pricing; CloudWatch unified data management (Dec 2025, search result); DevOps Agent pricing; DevOps Agent generally available (Mar 2026, search result); Kiro, DevOps Agent and Bluebox (search result)
- Microsoft, Azure SRE Agent pricing
- Cloud commitments and marketplaces: Microsoft Learn, Azure consumption commitment benefit (search result); Google Cloud, commitment drawdown for Marketplace purchases (Sep 2025, search result); Redress Compliance, AWS EDP and marketplace drawdown (search result)
Surveys, press and analysis
- Grafana Labs: Observability Survey 2025; 2026 survey release (Mar 2026); open standards in the 2026 survey
- Splunk, State of Observability 2025 (Oct 2025); IT Brief UK, Splunk's UK findings
- The Pragmatic Engineer, 2025 survey, part 3 (Oct 2025)
- Vendr, Datadog purchase data (Feb 2026); Gartner, midsize enterprise definition (search result)
- WebProNews, an AI-assisted move from Datadog to Grafana (Jan 2026)
- Catchpoint, summary of Gartner's observability spend research; AWSInsider, Gartner on CloudWatch costs (Jul 2025)
- The Pragmatic Engineer: inside the Datadog outage (2023); Datadog's $65 million customer (May 2023, search result); The Pulse #148, OpenAI's Datadog spend (Oct 2025, search result)
- SaaSRise, Datadog's biggest AI client cuts usage (2026, search result)
- InfoQ, Airbnb's OpenTelemetry metrics pipeline (Apr 2026, search result)
- Okta, support system breach root cause (Nov 2023, search result)
- Dark Reading, Microsoft offers free logging (2023, search result); TechTarget, Cyber Safety Review Board on Microsoft (Mar 2024, search result)
- CrowdStrike outage: Axios, Fortune 500 impact (Jul 2024, search result); The Register, Delta's lawsuit allowed to proceed (May 2025, search result)
- TechTarget, Dynatrace executives on Bluebox (2026)
- Datadog AI credits change, pricing tracker (Jun 2026, search result)
Field Guides are learning notes, not legal or compliance advice. Rules and fees change; check the cited primary sources before you act on anything here.