Cloud Reporter
The Cloud Reporter app enables licensing cost optimization by pinpointing high-cost app/infra events stored in log analyzers.
Pinpoint Costly Events
Deliver granular cost insight for app/infra event types incurring the highest storage and licensing costs. Provide dev teams with data for targeting highest-impact optimization efforts.
Processing production logs reveals precise cost distribution patterns by event type, enabling targeted optimization strategies. See detailed cost analysis examples from the dev app for comprehensive breakdowns and savings calculations.
AI Recommendations
The reasoning AI model provides context on the origin of the costliest event types and delivers actionable recommendations for lowering costs. Use the model built into the managed 10x Console dashboards or bring your own (OpenAI, Anthropic, Grok).
Logs to Metrics
Integrate granular cost metrics into your FinOps dashboards and alerting using Metric outputs.
Deliver actionable event-level cost insight metrics to CloudWatch and Datadog to detect operational anomalies and enhance FinOps dashboards and alerting.
Query the 10x REST API to apply custom ML algorithms like Policy functions to control and regulate across your environment(s).
Workflow
The Cloud Reporter app samples log analyzers including Splunk, Elasticsearch, CloudWatch Logs, and Datadog Logs. Timeframe filters and platform-specific criteria (indices, sources, tags) focus analysis on relevant data sets.
graph LR
A["<div style='font-size: 14px;'>⏰ Execute</div><div style='font-size: 10px; text-align: center;'>CronJob</div>"] --> B["<div style='font-size: 14px;'>📥 Sample</div><div style='font-size: 10px; text-align: center;'>Retrieve Events</div>"]
B --> C["<div style='font-size: 14px;'>🔄 Transform</div><div style='font-size: 10px; text-align: center;'>into TenXObjects</div>"]
C --> D["<div style='font-size: 14px;'>🎁 Enrich</div><div style='font-size: 10px; text-align: center;'>Add Context</div>"]
D --> E["<div style='font-size: 14px;'>📊 Aggregate</div><div style='font-size: 10px; text-align: center;'>Group by Cost</div>"]
E --> F["<div style='font-size: 14px;'>📈 Report</div><div style='font-size: 10px; text-align: center;'>Publish Metrics</div>"]
classDef execute fill:#7c3aed88,stroke:#6d28d9,color:#ffffff,stroke-width:2px,rx:8,ry:8
classDef sample fill:#2563eb88,stroke:#1d4ed8,color:#ffffff,stroke-width:2px,rx:8,ry:8
classDef transform fill:#0891b2,stroke:#0e7490,color:#ffffff,stroke-width:2px,rx:8,ry:8
classDef enrich fill:#059669,stroke:#047857,color:#ffffff,stroke-width:2px,rx:8,ry:8
classDef aggregate fill:#ea580c88,stroke:#c2410c,color:#ffffff,stroke-width:2px,rx:8,ry:8
classDef report fill:#16a34a88,stroke:#15803d,color:#ffffff,stroke-width:2px,rx:8,ry:8
class A execute
class B sample
class C transform
class D enrich
class E aggregate
class F report⏰ Execute: Runs periodically as k8s CronJob for continuous cost visibility
📥 Sample: Retrieves log events from analyzers via REST APIs with configurable filters
🔄 Transform: Structure sampled events into well-defined TenXObjects
🎁 Enrich: Applies enrichment rules to augment TenXObjects with intelligent context
📊 Aggregate: Groups TenXObjects to show data volume per event type, severity, and more
📈 Report: Publishes cost metrics to time-series DBs for dashboards, AI analysis and alerts
Architecture
Without 10x, a small fraction of app/infra events incur the bulk of log analytics licensing, compute and storage costs with no cost visibility as to their source code/binary origin.
Forwarders ship events to log analyzers with no cost visibility.The 10x Engine runs as a k8s CronJob, sampling events from the target log analyzer via REST to aggregate and report high-cost app/infra events to the 10x Console.
Cloud Reporters publish event cost metrics to the 10x console.The 10x Engine runs as a k8s CronJob, sampling events from the target log analyzer via REST to aggregate and report high-cost app/infra events to metric outputs.
Cloud Reporters publish event cost metrics to time-series DBs.Infrastructure & Security
Cloud Reporter runs entirely within your own Kubernetes cluster — no log data leaves your infrastructure.
Key guarantees:
- All processing happens in your cluster — Kubernetes CronJob under your control
- Log data is sampled, not retained — Only aggregated cost metrics are generated and returned
- Works on any cloud provider — AWS EKS, GKE, AKS, or on-premises Kubernetes
- Read-only access to your SIEM — Minimal footprint, no side effects
See the Cloud FAQ for complete details on deployment, data access, and security guarantees.