Logstash vs Oracle Cloud Infrastructure Logging
Logstash
elastic.coOracle Cloud Infrastructure Logging
oracle.comSide by side
| Figure | Logstash | Oracle Cloud Infrastructure Logging |
|---|---|---|
| Price from | Free | $0.05/mo |
| Free plan | Yes | Yes |
| Free trial | Yes | Yes |
| Open source | — | — |
| Web | — | Yes |
| Windows | — | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 1 | 4 |
| Spec score · Log Management Software | 8.5 (#25) | 9.0 (#12) |
| Archive export | Yes | Yes |
| Deployment options | self-hosted | cloud |
| Free plan | Yes | Yes |
| Integrations | Elastic describes turn-key integrations for connecting data sources and ingesting logs, metrics, traces, files, web content, and security events. | Connector Hub can route logs to Monitoring, Notifications, Streaming, third-party destinations including Splunk, or Object Storage. |
| Log pipelines | Yes | Yes |
| Security | The product page says ingest pipelines can be secured and describes built-in security features for Pipeline Management UI controls. | Log groups and Oracle Identity and Access Management policies control access to logs, and unauthorized requests are denied and audited. |
| Structured log parsing | Yes | Yes |
Plans
Oracle Cloud Infrastructure Logging
- Free allowanceFree
- Usage$0.05 a month
- Free tierFree
- Pay as you go$0.05 a month
In their own words
Logstash
Logstash is an open-source, server-side pipeline that collects data from many sources, transforms events, and sends results to destinations. It can continuously ingest logs, metrics, web application data, data-store information, and AWS service data. Filters parse events, identify fields, and transform content with features such as grok parsing, IP geolocation, and anonymizing or excluding sensitive fields. Data can go to multiple outputs, including Elasticsearch. Its plugin framework includes more than 200 input, filter, and output plugins, and custom plugins can be built with an API and generator. Persistent queues provide at-least-once delivery for in-flight events after node failures; dead letter queues retain events for inspection and replay. Monitoring tools show pipeline performance and availability. Logstash supports log pipelines, archive export, live tailing, and structured parsing. It is self-hosted, with Linux packages and Docker listed. The free plan is free under the Elastic License.
Oracle Cloud Infrastructure Logging
Oracle Cloud Infrastructure Logging is a cloud service for collecting and working with audit logs, OCI service logs, and custom application logs. It supports SQL-like searches, filtering, aggregation, and visualization across infrastructure, application, audit, and database logs, with structured parsing and log pipelines. Custom logs can come from OCI instances, Oracle Container Engine for Kubernetes, on-premises environments, and other cloud providers. Listed service sources include Network Flow Logs, Load Balancer, Object Storage, Functions, API Gateway, and Events. You can use the OCI console, an SDK, command-line interface, REST API, or Terraform. Connector Hub can route logs to Monitoring, Notifications, Streaming, third-party destinations including Splunk, or Object Storage; exports to Object Storage can provide indefinite retention. Ingestion uses Fluentd, and events are normalized to CloudEvents 1.0. Access is managed through log groups and Oracle Identity and Access Management policies. The free tier includes 10 GB of log storage per month, with ingestion and search free. Pay-as-you-go storage is $0.05 per GB stored per month.