if you're using it for log analytics / observability and are open to alternatives, check out ChaosSearch (same API/UI, different backend with all data persisted in cloud storage, removing management pain, cost & retention trade-offs esp. at scale). disclaimer: i work there, so feel free to DM if you want to know more