Enterprise Features

Single Sign-On (SSO): OIDC, OAuth, SAML 2.0, LDAP/AD, and integration with major identity providers (Okta, Azure Entra, Google, GitHub, GitLab, Keycloak)
Advanced RBAC: Granular role-based access control with custom roles and permissions – Learn more
Audit trails: Comprehensive immutable audit logs with configurable retention
Sensitive Data Redaction (SDR): Automatically redact PII and sensitive data during ingestion and queries
Advanced encryption: AES-256 SIV cipher keys with Google Tink KeySet and Akeyless integration
Rate limit: Control API request rates and protect against abuse

Query performance: 100x improvement for many queries
Federated search / Super Cluster: Query across multiple clusters and regions
Query management: Control query resource usage and priorities
Workload management (QoS): Quality of Service controls for multi-tenant environments
Query optimizer / Aggregation cache / TopK Aggregation: Advanced query optimization for faster performance
Broadcast join: Optimized join operations for distributed queries
Metrics auto downsampling: Automatic downsampling for long-term metrics retention

Incident management: Automated incident creation and tracking from alerts
SRE Agent: AI-powered root cause analysis with correlated logs, metrics, and traces
AI assistant: Intelligent assistant for observability workflows
Log Patterns: Automatic pattern extraction and anomaly identification
MCP server: Model Context Protocol server for AI integrations
Logs, metrics, and traces correlation: Automated detection and correlation across telemetry signals

Bring Your Own Bucket (BYOB): Connect your own AWS S3 bucket, Azure Blob container, or Google Cloud Storage (GCS) bucket to OpenObserve Cloud, keeping data in your account, region, and security perimeter. AWS supports both access keys and IAM Role ARN (STS assume-role with External ID) authentication – Learn more