Hey everyone. I'm looking into SIEM options for our small startup (5 devs, ~20 EC2 instances, some Lambda). We're trying to do things "right" and centralize logs. My lead suggested we look at Google Chronicle, but I've heard rumors about the pricing being intense.
I've only used Terraform to set up CloudTrail and a basic S3 bucket for logs. The idea of a managed service is appealing, but I can't find clear, simple pricing online. It seems enterprise-focused.
For those using it:
* Is it even feasible for a team our size, or are we too small?
* What does the cost actually look like? Is it per GB ingested, per user, or something else?
* If it's too expensive, what's a good alternative that still plays nice with GCP/AWS? 😅
I'm just trying to learn and avoid a big cost surprise. Thanks!