Observability used to be the part of the infrastructure budget that nobody questioned. After all, it made systems debuggable. Moreover, it caught incidents before customers did. Meanwhile, the bill was a small enough rounding error that finance teams approved it without reading the line item.
That era is over.
Bonus
Download a PDF version of this blog. Access it offline anytime. Bring it to team or client meetings.
In 2026, the average enterprise collects more than 10 terabytes of telemetry data every day. That figure is a fivefold increase since 2019. Meanwhile, observability costs have surged in the low-200% range over four years. Notably, eighty-four percent of observability users tell Gartner they are actively struggling with the cost. As a result, organizations now spend $1 million to $10 million annually just to see what their systems are doing. Worse still, the spend keeps climbing faster than the engineering teams it is supposed to support.
Something has to break, and it is starting to. In fact, OpenTelemetry adoption has crossed the threshold from emerging standard to default plumbing. Today, 48.5% of organizations use it, with another 25% planning implementation. Moreover, APMdigest forecasts roughly 95% adoption for new cloud-native instrumentation by year end. In parallel, real-world migrations are documenting cost reductions of 50 to 72 percent. Additionally, industry surveys report a clear majority of IT leaders saying they are likely to switch observability platforms within the next one to two years. Put simply, the vendor switching window is open and the open standard is mature. Consequently, the cost mathematics of legacy vendor-locked observability no longer work for any engineering organization shipping AI features.
This post unpacks the data, names the failure modes, and lays out a reference architecture for getting observability costs back under control. Crucially, it does so without losing the visibility that made the spend worthwhile in the first place.
The core tension in 2026
Vendor-priced observability scales linearly with data volume. However, the value derived from that data does not. Moreover, AI workloads make this worse. For example, a single LLM call produces 8 to 15 spans versus 2 to 3 for a typical API endpoint. In addition, a five-step agent generates 40 to 75 spans for one user interaction. Consequently, telemetry volume is growing nonlinearly while observability budgets are growing linearly. As a result, the math typically breaks within twelve to eighteen months for any team shipping AI features at scale.
1. The Cost Crisis Is Real and Accelerating
The headline numbers come from multiple independent sources. Moreover, they all point in the same direction. Gartner reports that 84% of organizations using observability tools are struggling with costs. Meanwhile, the average enterprise now collects more than 10 TB of telemetry data per day. That figure is a fivefold increase since 2019. In addition, observability spend has risen in the low-200% range over four years, according to industry analyses repackaging the underlying vendor data.
Spending levels for individual enterprises typically range from $1 million to $10 million annually. Furthermore, in the largest deployments, observability bills can rival or even exceed the underlying compute spend. The 2026 Grafana Observability Survey is the largest community-driven survey in the space, with more than 1,300 respondents. Notably, it captures the same cost pressure even as adoption keeps climbing.
The root cause is a pricing model that worked beautifully for a decade. However, it broke quietly once telemetry stopped scaling linearly with traffic. For example, Datadog, New Relic, Splunk, and most other commercial platforms charge primarily by data volume. Specifically, logs are billed per GB ingested, custom metrics per host, traces per span, and APM per host. In short, that model was designed for a world where more users meant proportionally more logs, traces, and metrics.
How AI workloads break the linear pricing assumption
However, AI workloads break that assumption completely. Every LLM call needs token-level cost attribution, prompt and response logging, and vector database query tracing. In addition, teams must capture embedding similarity scores, guardrail trigger rates, and cost-per-query metrics. As a result, adding AI to even a fraction of an organization’s services drives a four-to-eight-times increase in observability spend. Moreover, every improvement to those AI features — more tools, multi-step reasoning, RAG — compounds the growth.
The three structural shifts driving AI telemetry costs
Three structural shifts are colliding at once.
First, the per-request span count has exploded. By contrast, a traditional REST endpoint produces only two to three spans per request. However, a single LLM call now produces eight to fifteen spans. That total covers the API request, token streaming, embedding lookups, vector DB queries, prompt assembly, guardrail checks, and response parsing. Worse still, a five-step agent reasoning loop generates forty to seventy-five spans for what the user perceives as one interaction.
Second, log volume is ballooning. Specifically, every prompt, response, tool call, and intermediate reasoning step needs to be captured for debugging and compliance.
Third, the metrics catalog is exploding. Teams are now tracking token usage, latency per model, cache hit rates, embedding similarity scores, guardrail trigger rates, and cost-per-query. Crucially, those metrics sit on top of every existing infrastructure metric. Consequently, vendors charging per custom metric experience this as windfall revenue. Meanwhile, engineering teams experience it as a budget catastrophe.
The behavioural consequence
When the monitoring bill scales with the application’s success, engineering decisions start being made for the wrong reasons. For example, teams drop log levels to reduce volume. In addition, they sample too aggressively and miss the rare event that would have explained the outage. Furthermore, they skip traces for AI calls deemed “unimportant.” Yet those are precisely the calls that turn out to matter once a customer complains.
In LogicMonitor’s 2026 survey, 59% of respondents say they are not getting useful insights from their platforms. However, this is not a technology problem. Instead, they are running into a cost-induced visibility problem. In other words, the very telemetry that would help them understand their systems has been suppressed because it was too expensive to keep.
2. OpenTelemetry Is Crossing Into Default Status
The exit strategy from this trap has had a name for several years: OpenTelemetry. However, 2026 is the year it stops being aspirational. Today, the CNCF-graduated standard has more than 10,000 contributors from 1,200 companies. Moreover, it has reached 48.5% adoption with another 25% planning implementation. In fact, APMdigest forecasts roughly 95% adoption for new cloud-native instrumentation by year end.
Elastic’s 2026 Landscape of Observability report is based on 500-plus IT decision-makers. Notably, it found that 89% of production OpenTelemetry users consider compliance with the full specification, semantic conventions, and native ingestion at least “very important” when evaluating vendors. Meanwhile, the semantic conventions for GenAI — the gen_ai.* attribute namespace — are maturing fast. As a result, they are standardizing how token counts, model identities, and cost attribution flow through traces.
Why open standards flip the pricing leverage
The economic argument is straightforward. Specifically, vendor-specific agents create lock-in because re-instrumentation costs are enormous. For instance, switching observability backends after building an instrumented application typically requires rewriting every agent integration, every dashboard, and every alert. However, OpenTelemetry inverts that calculation. Instead, teams instrument once against the open standard and route telemetry through a Collector they operate. As a result, the choice of analytics backend becomes a configuration change rather than an engineering project. Consequently, the pricing leverage that observability vendors enjoyed for a decade evaporates as soon as customers can credibly threaten to switch. In fact, APMdigest’s prediction for 2026 captures the shift in one phrase. According to that forecast, OpenTelemetry is becoming a “cost-control chokepoint,” where the Collector pipeline is the central lever for controlling observability spend across the entire stack.

The realistic destination: OTel plus a commercial backend
It is worth being precise about what “winning the OpenTelemetry transition” actually looks like. After all, the most-read narratives oversell the rip-and-replace path.
For a small fraction of organizations, the destination is OTel plus a self-hosted open-source backend such as the Grafana Stack, OpenObserve, or ClickHouse-based pipelines. Typically, these are platform-engineering-heavy teams with strong SRE capacity. The savings can be dramatic. However, so is the operational cost of running production-grade observability infrastructure as a software product.
For the majority of organizations, the realistic destination is OTel plus a commercial backend such as Datadog, New Relic, Splunk, Honeycomb, Chronosphere, or Grafana Cloud. This includes most enterprises represented in the Grafana 2026 and Elastic 2026 surveys. Importantly, the point of the OTel investment is not to fire the vendor. Rather, it is to make switching credible enough that the renewal price reflects the leverage. As a result, engineering organizations that arrive at the negotiation with a working Collector fleet routinely report renewal pricing improvements of 20 to 40 percent. Notably, they capture those savings without ever filing a migration ticket. In short, the architecture is the leverage.
The Grafana 2026 data points in the same direction. Specifically, organizations are consolidating observability tools rather than abandoning commercial vendors wholesale. Moreover, the consolidation favours backends that ingest OTel natively. Therefore, treat “native OTel ingestion” as the table-stakes criterion in your next vendor evaluation. Then most of the cost work happens upstream of the contract.
Table 1 — Documented Cost Reductions Through OTel-Native Migrations
| Organization / Case | Reduction | Mechanism |
| STCLab vs prior vendor | −72% | OpenTelemetry-native ingestion; eliminated sampling constraints. |
| OpenObserve vs Datadog (DevZero)* | −75% to −90% | Self-hosted backend; reported 140× compression (vendor-published comparison). |
| Zendesk APM optimization | −60% | Single-span ingestion with embedded performance fields. |
| RapDev Splunk-to-Datadog migration | −90% log ingestion | Pipeline redesign; $734K annual savings reported. |
| Adopter median (Grafana 2026) | >20% ROI | Roughly half of OTel adopters report this floor. |
OpenObserve vs Datadog comparison is published by OpenObserve and is therefore a vendor-published competitive claim; treat it as a directional ceiling rather than independent evidence. Sources: ByteIota 2026 OTel report, Datadog Zendesk case study, RapDev case study, OpenObserve 2026 alternatives report, Grafana 2026 Observability Survey.
3. The Three Failure Modes That Inflate Observability Bills
Every observability program that produces a runaway bill exhibits at least one of three recognizable failure modes. Naming them clearly is the first step toward fixing them.
Failure Mode 1: Ingest-Everything Defaults
The most common failure is that nobody ever decided what to keep and what to drop. For example, application teams instrumented their services years ago. In addition, vendor agents auto-discovered every host and every metric. Meanwhile, default retention policies hold logs for thirty to ninety days. Furthermore, traces sample at 100% because that was the easy default.
Most teams have never audited the resulting data to ask the basic question: which 20% of metrics show up in 80% of dashboards and alerts? Notably, Zendesk’s cost optimization initiative, documented in detail on the Datadog blog, used precisely this Pareto-principle audit as the starting point. As a result, it surfaced enough low-value telemetry to drive meaningful cost reductions without losing operational visibility. In short, the pattern is general. Specifically, the cheapest cost optimization is not a vendor change but a careful audit of what is currently being collected and why.
Failure Mode 2: Single-Tier Hot Storage
The second mode is paying hot-tier prices for data that nobody is going to query in real time. Specifically, most observability platforms charge premium rates for fast, indexed storage that supports interactive dashboards and ad-hoc queries. However, that premium is justified only for the last seven days of data, occasionally the last thirty. Beyond that, the access pattern shifts to compliance retention, postmortem deep-dives, and trend analysis. Importantly, none of these require millisecond query latency.
A properly tiered architecture moves data through three layers. First, hot storage holds zero to seven days. Next, compressed warm storage handles seven to ninety days. Finally, a cheap object-storage archive holds anything beyond ninety days. As a result, teams routinely capture a 50 to 70 percent cost reduction without changing instrumentation. The technical mechanism is mature. However, the organizational discipline to actually implement tiering remains rare.
Failure Mode 3: AI Workloads on the Same Pipeline as Everything Else
The third mode is the failure that is now hitting teams hardest because it is the newest. Most organizations are routing AI telemetry through the same observability pipeline as their traditional services. Moreover, they apply the same default sampling rates and the same vendor pricing model. That works briefly. However, it stops working as soon as AI features move from prototype to production traffic. At that point, the per-request span count explodes and the bill follows.
AI workloads need a dedicated ingestion pipeline with three properties commercial defaults rarely provide. First, they need tail-based sampling that makes routing decisions after seeing the full request lifecycle. As a result, this preserves rare-but-important events instead of dropping them statistically. Second, they need 100% capture for failures, high-latency requests, and any request that triggers a guardrail. After all, these are the cases postmortems will need. Third, they need cost-aware aggressive sampling, often 5 to 10%, for routine successful calls. The reason is simple: the 90% of LLM responses that worked fine carry the bulk of the volume and almost none of the diagnostic value.
The data shapes are different too. Specifically, AI workloads produce large text payloads, high-cardinality token counts, and evaluation scores requiring statistical analysis instead of threshold alerting. Consequently, treating AI telemetry as just “more traces” in the existing pipeline is the single most common reason 2026 observability bills surprise CFOs.
High-impact pattern — the cost-induced visibility gap
When teams hit their observability budget ceiling, they often start dropping log levels, sampling more aggressively, or skipping traces for AI calls. As a result, they create exactly the visibility gaps that the observability program was supposed to prevent. Notably, the most expensive observability incidents in 2026 are not the ones caused by missing tools. Instead, they are the ones caused by tools that were defunded into uselessness because the bill was unsustainable.
4. A Reference Architecture — The Cost-Controlled Observability Pipeline
The teams that have absorbed AI-era telemetry volumes without absorbing the corresponding bills all share a structural pattern. Specifically, they separate four distinct concerns. First, signal collection is vendor-neutral and instrumented once. Second, pipeline processing handles filtering, sampling, redaction, and routing at the OpenTelemetry Collector. Third, policy enforcement uses FinOps cost gates that block services exceeding telemetry budgets. Finally, tiered storage matches storage cost to data age and value.
The reference architecture below is adapted from CNCF OpenTelemetry guidance, the Grafana Labs cost-control playbook, and the patterns documented across the 2026 case studies. Together, these sources form the blueprint that consistently delivers the 50-to-72-percent cost reductions cited in the literature.

The four architectural decisions
Each layer makes a single decision that pays for itself many times over.
Instrument with OpenTelemetry SDKs, not vendor agents.
Instrumentation is the most expensive observability work an organization does. Therefore, tying it to a single vendor’s SDKs is the most expensive form of lock-in. By contrast, OTel SDKs now cover every major language and major framework. As a result, switching backends becomes a configuration change rather than a re-instrumentation project.
Run an OTel Collector fleet between sources and backends.
The Collector is where the cost-control work happens. Specifically, it handles filtering, tail-based sampling, redaction of sensitive fields, and routing decisions. Notably, APMdigest’s 2026 prediction labels this “Data Optimization as a Service.” As a result, it is rapidly becoming the most strategic component of the observability stack.
Enforce telemetry budgets with a FinOps cost gate.
Platform engineering teams should own observability strategy in 2026. Specifically, cost budgets should be enforced at the platform level. In addition, pre-deployment cost gates reject services projected to generate excessive telemetry. Meanwhile, chargeback models make costs visible to product teams. For example, when a service’s observability spend appears on its own P&L, the team responsible has both the visibility and the incentive to address it. Without a chargeback model, however, the platform team owns a bill they did not generate and cannot meaningfully reduce.
Tier storage by access pattern, not by data type.
First, hot storage (0–7 days) handles incident response and live dashboards. Next, warm storage (7–90 days, compressed) supports trend analysis, weekly reviews, and quarterly capacity planning. Finally, cold storage (90 days plus, on S3 or GCS) covers compliance retention and forensic access. Notably, the cost-per-GB ratio between hot and cold tiers is often 100:1 or higher. Therefore, matching storage tier to query frequency is the single largest cost lever once instrumentation is portable. As a result, teams routinely capture 40 to 60% cost reductions on the storage line alone without changing what gets collected.
Engineering leader takeaway
Adopt OpenTelemetry before negotiating the next observability contract. Without OTel, the vendor knows you are captive, and the renewal price reflects it. By contrast, with OTel and a Collector pipeline already operational, the threat to switch backends becomes credible. As a result, renewal pricing typically improves by 20 to 40 percent before the migration is even seriously contemplated. In short, the leverage is the architecture, not the migration.
5. A 30-60-90 Playbook for Engineering Leaders
Adopting the cost-controlled observability architecture is a multi-quarter program for large estates. However, the highest-leverage moves can be staged cleanly across the first ninety days. The playbook below is adapted from several sources. Specifically, it draws on migration patterns documented by RapDev, Datadog’s own Zendesk case study, the Grafana Labs cost-control playbook, and the consolidation recommendations in LogicMonitor’s 2026 Observability and AI Outlook.
Table 2 — Implementation Roadmap
| Window | Focus | Key Actions |
| Days 0–30 | Audit the current spend | Run a Pareto-principle audit — which 20% of metrics power 80% of dashboards? Build a cost-attribution dashboard. Identify the top three highest-volume signals with the lowest demonstrated value. |
| Days 31–60 | Deploy the OTel Collector | Stand up the Collector fleet alongside existing vendor agents (do not rip and replace). Begin migrating new services to OpenTelemetry SDKs. Implement tail-based sampling for AI workloads as the first pipeline. |
| Days 61–90 | Implement tiered storage and cost gates | Move logs older than 7 days to warm storage, logs older than 90 days to cold object storage. Add a pre-deployment cost gate that estimates and approves telemetry budget for every new service. |
What not to do
- Do not rip and replace the existing observability vendor in month one.The migration risk is enormous. Moreover, the cost benefit comes from architectural changes that can be implemented without removing the current backend. Therefore, run OTel alongside the incumbent first.
- Do not start by negotiating with the vendor.Without the OTel Collector and a credible threat to switch, the negotiation is theatre. After all, the vendor knows the cost of migration and has priced the renewal accordingly.
- Do not over-sample to control costs.Aggressive head-based sampling produces visibility gaps precisely where they hurt most, such as rare errors and slow tail-latency requests. By contrast, tail-based sampling is the better lever. Specifically, it makes decisions after seeing the full request and preserves capture for the events that actually matter.
- Do not put AI workload telemetry on the same pipeline as traditional services.The volume curves are different. Moreover, the data shapes are different. In addition, the sampling strategies need to be different. Finally, the cost-control mechanisms need to be different too.
6. Practical Takeaways
If there is a single lesson in the 2026 observability data, it is straightforward. Specifically, the cost crisis is real, the standard for fixing it has matured, and the vendor switching window is open for the next twelve to twenty-four months. Below, five takeaways summarize the evidence.
- Audit what you are collecting before you audit what you are paying.The cheapest cost reduction is the telemetry you stop generating, not the telemetry you renegotiate the price of.
- Treat OpenTelemetry as architecture, not as a vendor feature.Instrument once against the open standard and run a Collector fleet. As a result, the choice of backend becomes a configuration change. In fact, that portability is the entire pricing leverage of modern observability.
- Tier your storage aggressively.The cost differential between hot and cold storage is often 100:1. Moreover, the access frequency on data older than 30 days does not justify hot-tier pricing in any organization that has measured it carefully.
- Separate AI workload telemetry from traditional service telemetry.The volume curves are different. Moreover, the cost-control techniques are different. Consequently, conflating them on one pipeline is the surest way to produce an unsustainable bill within twelve months.
- Move observability strategy into platform engineering.Specifically, cost budgets enforced at the platform level, with chargeback models making costs visible to product teams, is the only governance model that scales. Without it, however, the bill grows faster than the engineering team can audit it.
Conclusion: The Reckoning Has a Name, and It Is OpenTelemetry
The observability cost crisis of 2026 is not a permanent condition of software engineering. Instead, it is a transitional one. Specifically, it is caused by the collision of three forces that all hit in the same eighteen-month window. First, AI workloads broke the linear-volume pricing assumption. Second, telemetry volumes outgrew the platforms designed for a smaller scale. Finally, the open-standard alternative matured to the point where switching costs became defensible.
The teams that move quickly will keep the visibility that made observability worth paying for. Specifically, they will adopt OpenTelemetry as architecture, run a Collector fleet between their applications and their backends, tier storage by access pattern, and treat observability spend as a platform-engineering responsibility. As a result, they will keep that visibility at a cost the finance team will approve without flinching. By contrast, the teams that defer the work will keep paying the AI-multiplied bill until the bill itself becomes the next budget casualty.
The reckoning has arrived. The playbook is mature. The window for moving on favourable terms is now.