https://www.elastic.co/blog/advantages-of-resource-based-pri…
TL;DR
Really emphasising the benefits of their pricing model for SIEM. They state key challenges for ‘traditional’ pricing models for SIEM are:
- deployment on customers schedule - no overpurchasing
- have to decide prior to data collection what data is collected
- breaches may require more resources than current contract allows
- Unpredictable billing given the dynamic nature of cloud resources (containers, servers scaling up and down)
- Having to pay for different ways to access the data (eg: analytics)
It’s not immediately clear to me how Splunk, DataDog, NewRelic pricing models compare. Anyone have any thoughts?
ESTC report today… er now, waiting with interest 
cheers
Greg