Anyone have suggestions on how to help your users see that their logging is out of control?

are you able to share the associated costs of said logging? eg resource/Datadog billing with them?

That can be shared for sure. Just trying to figure out if i'm missing something or if someone's found a better way that what we're doing haha

We did something similar once. In order for Grafana to be able to manage all the logs and return query results, we needed a lot of compute for it, and we showed them the AWS costs

whoa gnarly

I've also used costs in the past. We ran a monthly Splunk report to get the amount of data per index. Those indexes were mapped to the teams that owned them, and based on the Splunk costs for that month we were therefore able to calculate the costs per team.

Show them CW logs costs as an example

Limit retention duration to something you can tolerate.