Use Case
Route logs by value
Send hot logs to Datadog and full history to S3.
Problem
Single-destination logging makes teams choose between high cost and weak retention.
Operational and compliance workloads need different storage behavior.
Example
Incident response depends on rapid Datadog queries, while audits require complete multi-month retention.
Keeping everything indexed in one place creates unnecessary spend.
Solution (LogTrim)
Route high-signal operational logs to Datadog.
Route complete log streams to S3 for retention and forensics.
Keep routing rules centralized so every service follows the same policy.
Continue to full guide
Review the complete implementation guide and rollout strategy for this use case.