Use cases / SIEM and threat hunting
Hunt across a year of security data, not the last 30 days.
Most SIEMs price by ingest, so teams drop logs or cut retention. WarpSearch keeps Suricata, DNS, proxy, Windows and Sysmon events searchable for as long as you need, and every pivot is one query.
What hunting needs
Long retention, cheap
Storage is tiered per GB, down to $0.035 above 100 TB, so a year of events is priced like storage, not like ingest.
Pivot fast
Filter by IP, host, user or hash in milliseconds, then aggregate: top talkers, rare processes, beaconing intervals.
Bring your queries
Elasticsearch DSL, SQL and Lucene syntax. Many hunting queries written for Elasticsearch run as they are.
Your shippers
Logstash, Beats, Fluent Bit and Vector send through their Elasticsearch outputs.
Alongside your SIEM
Keep your SIEM for alerting and send the full, long-term data to WarpSearch for hunting and investigations.
Graph pivots
Walk relationships between users, hosts and IPs with graph queries and shortest paths.
What a year of searchable data costs
Monthly cost at list prices in US East, compared with running OpenSearch yourself.
| Platform | Mid-size logs | Large logs |
|---|---|---|
| WarpSearch | $1,465 | $39,060 |
| OpenSearch Service | About $2,0001.4x cheaper | About $103,0002.6x cheaper |
| Aiven | About $18,00012x cheaper | Not a fit |
| Mid-size logs | 10 TB of raw logs kept searchable. 1 TB written a month. 10,000 dashboard aggregation queries a month. |
|---|---|
| Large logs | 1 PB of raw logs kept searchable. 50 TB written a month. 100,000 heavy aggregation queries a month. |
List prices in US dollars, checked October 20, 2026. Ranges cover regions, plan choices, or how the vendor sizes compute. All comparisons and sources.
Good to know
WarpSearch is a search and analytics store, not a full SIEM: it has no detection rules engine, alerting or case management. Pair it with your SIEM or SOAR, or run scheduled queries from your own tooling.
Read next
Free up to 1 GB, no card. Pay per GB and per request after that.