Elastic log storage costs: LogsDB, pattern_text and tiers
How to cut your log bill in Elastic: LogsDB mode, the pattern_text field, data tiers and searchable snapshots. What works after upgrading from 8.x.
Blog
Articles on Elastic Stack, observability, monitoring, log management and SIEM, by Relipoint engineers. Posts from other Conetso brands appear too.
From Grafana and Datadog to Elastic: PromQL in 9.5
Elastic 9.5 of 4 August 2026 marks PromQL as GA and describes a tool for moving dashboards. What works today and what still needs manual work.
Elastic Security 9.4: Workflows GA and SIEM Readiness
Elastic Security 9.4 of 5 May 2026: Workflows in GA, SIEM Readiness in preview, separate privileges for rules and alerts, and new entity analytics.
Elastic 9.4 for metrics: managed OTLP endpoint and PromQL
The 9.4 release of 5 May 2026: a managed OTLP endpoint in Elastic Cloud, PromQL in preview and changes to time series indices. Watch for upgrade changes.
End of support for Elastic 8.x in 2027: an upgrade schedule
Maintenance of the 8.x series ends on 15 January 2027. We build an upgrade schedule backwards from that date and show how to choose the 9.x target version.
Elastic 9.3: pattern_text, Streams and Workflows for logs
The 9.3 release of 3 February 2026: pattern_text is GA, Streams and Workflows are in technical preview. What to test on your own logs before you upgrade.
Migrating Splunk rules to Elastic Security in practice
Automatic Migration in Elastic Security translates Splunk rules and dashboards. How the process works, the requirements and why every rule needs a review.
EDOT Collector in Elastic 9.2: Windows logs, tail sampling
Elastic 9.2 extends the OpenTelemetry collector in Elastic Agent with Windows Event Log and tail sampling. How to use them, what to watch, config changes.
Failure store in Elastic 9.2: rejected logs no longer vanish
Elastic 9.2, released on 23 October 2025, turns on the failure store for new log data streams. What changes for clients and how to find errors.
Upgrading Elastic from 8.x to 9.x: order and pitfalls
How to move safely from Elastic 8.x to 9.x: the 8.19 step, the Upgrade Assistant, indices from version 7.x, TLS and LogsDB changes, and the upgrade order.
ES|QL in Elasticsearch 9.1: LOOKUP JOIN for log enrichment
Elasticsearch 9.1 and 8.19, released on 29 July 2025, make LOOKUP JOIN in ES|QL generally available. How to enrich logs with threat lists and host owners.
Grafana Alloy 1.9: what changes in the telemetry collector
What Grafana Alloy is, how it replaces Grafana Agent and what version 1.9 brings: breaking changes, new components and what to watch for when upgrading.
SIEM on Elastic Security: first steps with detection rules
How to start with SIEM in Elastic Security: log sources, prebuilt detection rules, custom rules and event correlation, and cutting false alerts.
OpenTelemetry with Elastic and Grafana: how to roll it out
OpenTelemetry is an open standard for collecting metrics, logs and traces. We describe a collector-based architecture that feeds Elastic and Grafana.
Benchmarking Elasticsearch with Rally: how to start
Rally (esrally) is the official tool for Elasticsearch performance tests. We show how to prepare a test, run it on your own cluster and read the results.
From other Conetso brands
Microsoft 365 licences: annual vs monthly commitment
You can reduce or cancel a Microsoft 365 licence only within 7 days of purchase or renewal. Learn when to choose an annual term and when a monthly one.
HubSpot webhooks automation for client onboarding
How we connected HubSpot with Microsoft 365 through webhooks, so a new deal starts client onboarding. We describe the architecture and the safeguards.
Business vs consumer laptops: which to buy for work
A laptop from an electronics store may cost less, but at work the differences show in the system, warranty and management. We explain how we choose.
AWS vs on-premises hosting for web applications
AWS vs on-premises hosting for web applications: we compare a Docker server, AWS Fargate and Lambda functions, and explain how we choose.
NIS2 for healthcare providers in Poland: KSC obligations
NIS2 for healthcare providers in Poland: the KSC Act now covers them. We explain who is an essential or important entity, the deadlines and first steps.
When to replace a business server: signs and support dates
A server's age alone does not decide when to replace it. Check the hardware warning signs, Windows Server 2016 end of support and how we plan the move.
B2B order management application: roles and billing
How to design a B2B order management application, with Service Quotes as an example. We cover roles, staff assignment and billing for materials and labour.
Common IT audit findings: five examples from practice
Five anonymised findings from our IT audits: backups, accounts and access, outdated systems and failure plans, with what we recommended for each.
Preparing for a custom software project: the first meeting
What to prepare before talking to a software house about a new system: the problem, roles, data and integrations. A checklist and the questions we ask.
Software licensing system: accounts, licences and REST API
A software licensing system for applications covers the data model, roles, licence checks over a REST API and offline use, shown on INVENTA Licenses.
Bitdefender vs CrowdStrike: protecting computers and servers
Bitdefender vs CrowdStrike: we compare GravityZone and Falcon. We explain when endpoint protection is enough and when a business needs EDR, XDR or MDR.
Software maintenance agreement: SLA, backups and updates
What to include in a software maintenance agreement for a web application: SLA, backups, updates, monitoring, access to code and ending the contract.
Backups in hospitals and clinics: PACS and ransomware
How to plan backups in a clinic or diagnostic centre and protect them from ransomware. We also cover restore tests and what the regulations require.
How to enable MFA in Microsoft 365 without downtime
The order in which to enable MFA in Microsoft 365 so that nobody loses access. We cover emergency access accounts, shared accounts and older applications.
Stripe subscriptions in a SaaS application: how they work
A SaaS subscription is a whole payment cycle. Using Offer Exchange as an example, we cover subscription states, webhooks, SCA and renewals in Stripe.
Microsoft 365 rollout plan for a company: steps and cost
A Microsoft 365 rollout plan for a company covers the choice of plan, email and file migration and security. We also explain timelines and cost factors.
Custom vs off-the-shelf software: how to choose
Off-the-shelf software works when your process is standard. Choose custom software when the process is your advantage or no product supports it.
Firewall migration to FortiGate: rules, VPN and downtime
How we move rules and VPNs from an old firewall to FortiGate. We explain how we plan the maintenance window, the tests and a fallback to the old device.
What to include in an MVP: the first version of your product
An MVP is the smallest version in which a customer completes the whole process. Using INVENTA Licenses and Offer Exchange, we show what to include.
Network segmentation in a clinic: medical devices and Wi-Fi
Network segmentation in a clinic separates staff, medical devices, guest Wi-Fi and printers. We explain the traffic rules and how to protect older devices.
Windows 10 end of support and ESU: next steps for businesses
The first year of paid ESU updates for Windows 10 ends on 13 October 2026. We explain ESU costs, Windows 11 requirements and how we plan replacements.
Custom software development process: six stages
Our custom software development process has six stages: consultation, contract, design, development, testing and deployment. Here is what each involves.
Optimed NXT: cloud or on-premises server? How to choose
We compare Optimed NXT Cloud with an installation on your own server. We cover server, backup and internet requirements and the questions to ask first.
The 3-2-1 backup rule: what it means and how we apply it
The 3-2-1 backup rule calls for three copies of data on two types of media, one of them off site. We explain it, the 3-2-1-1-0 variant and our approach.
Optimed NXT data migration: how switching systems works
Optimed NXT data migration from MyDr, mMedica or another system. We describe the migration stages, the rules on medical records and the pitfalls.
IT support: monthly plan or hourly billing?
We compare three IT support models: hourly billing, a fully managed monthly plan and partial support, and explain when each one pays off for a company.
How much does a custom web application cost?
We have no price list for web applications, because every system has a different scope. Here is what drives the cost and what our quote includes.
Managed IT services cost in Poland: our contract prices
Our managed IT services start at PLN 1,400 per month excl. VAT. See what drives the price, what the monthly plan excludes and how we quote an audit.
Threat monitoring and incident response in a company
Threat monitoring means continuously watching computers, servers, accounts and the network. We describe the tools we use and six incident response steps.
Is IT outsourcing worth it? When external IT pays off
Is IT outsourcing worth it? We compare full and partial outsourcing with an in-house IT team, look at the costs and show when it pays off.
Hospital information system (HIS): what it is, how it works
A hospital information system (HIS) keeps medical records, admissions, orders and NFZ billing in one program. We explain its modules and implementation.