Petabyte Scale, Gigabyte Costs: Mezmo’s Evolution from ElasticSearch to Quickwit

4 MIN READ
5 MIN READ

At Mezmo, we handle an enormous volume of telemetry data for our customers and ourselves, requiring a robust and efficient search and analytics backend. For years, ElasticSearch served us well, but as our infrastructure grew to a multi-cluster, multi-petabyte scale, we started to see the cracks—rising costs, performance bottlenecks, and scalability concerns. We needed a change, one that would make our system more cost-effective while maintaining speed and reliability.

After extensive research, we landed on Quickwit, an open-source, cloud-native search engine for logs. The transition was far from simple—it required significant engineering effort to revamp our infrastructure and help Quickwit adjust to new demands while ensuring a seamless experience for our customers. This blog takes you through our journey: why we moved, how we made the decision, the challenges we faced, and key lessons learned.

Recognizing the Need for Change

ElasticSearch had been the backbone of our search and analytics system, but we wanted to make things better:

  • Cost Optimization – Managing petabytes of data is a lot of data, but it’s important to also not break the bank in the process.
  • Performance could be better – While there were no impacts on our service, we felt that performance could be better.
  • Scalability – Just like performance could be improved, we felt the same of scalability. With Quickwit, we saw an opportunity to have the storage layer separated from the compute layer, making it possible to spin up nodes faster.
  • Reliability – While we had a good process to ensure a reliable customer experience, internally the scale of our ElasticSearch deployment meant that there was a lot of attention and intervention required.

Choosing the Right Solution: The Decision Framework

Selecting a new backend wasn’t just about finding a cheaper alternative—we needed a solution that was:

  • Cost-efficient – Could reduce storage and compute expenses without sacrificing performance.
  • Cloud-native – Designed to leverage modern cloud infrastructure.
  • Scalable – Could handle our ever-growing data volume without constant tuning.
  • Performance-driven – At least on par and ideally delivered faster queries and lower resource consumption.
  • Reliable – Faster, cheaper and all that means nothing if the customer experience suffers.

After evaluating multiple options, Quickwit stood out for its efficient indexing, cloud-native architecture, and log-specific optimizations.

Architectural and Engineering Challenges

Migrating a mission-critical system comes with challenges. Our biggest hurdles included:

  • Data migration at scale – Moving petabytes of data without downtime.
  • Query compatibility – Ensuring Quickwit could support our existing search patterns.
  • Maintaining performance – Avoiding disruptions to customer experience during migration.

To tackle these, we implemented a phased migration strategy, rigorous testing, and real-time performance monitoring to ensure a smooth transition.

Executing the Migration Without Disrupting Customers

To minimize risk, we took an incremental approach:

  1. Proof of Concept (PoC) – Tested a couple of applications running on Quickwit and compared them against ElasticSearch.
  2. Parallel Deployment – Running Quickwit alongside ElasticSearch to validate results and make refinements as needed.
  3. Gradual Traffic Shift – Slowly redirecting queries while monitoring performance – a break, adjust, and fix approach. 
  4. Full Cutover – Decommissioning ElasticSearch once Quickwit met all requirements.

This measured rollout ensured zero service interruptions and seamless adoption.

Key Takeaways & Lessons Learned

  • Recognize when to evolve – Don’t wait until performance issues impact customers.
  • Use a structured decision framework – Prioritize scalability, cost, reliability, and performance.
  • Plan for migration challenges – Expect unexpected roadblocks and address them proactively. For example, the markers to identify production issues in ElasticSearch were different in Quickwit. 
  • Customer experience is paramount – Maintain stability while making backend improvements. With our parallel deployment model, we could switch a customer back to ElasticSearch if something wasn’t performing right in Quickwit with no interruption to the customer. 
  • Continuous optimization is key. Post-migration tuning can unlock even more efficiencies. For example, we are still learning the right size for our cluster components and constantly fine-tuning them. 

Conclusion

Switching from ElasticSearch to Quickwit transformed our search and analytics infrastructure, reducing data storage/search costs by 90% while improving scalability and performance. While the journey wasn’t easy, the payoff was worth it. For companies struggling with costly, inefficient search architectures, our advice is simple: evaluate your needs, explore alternatives, and don’t be afraid to evolve.

Click here to watch Petabyte Scale, Gigabyte Costs: Mezmo’s ElasticSearch to Quickwit Evolution on-demand.

Table of Contents

    Share Article

    RSS Feed

    Next blog post
    You're viewing our latest blog post.
    Previous blog post
    You're viewing our oldest blog post.
    Mezmo + Catchpoint deliver observability SREs can rely on
    Mezmo’s AI-powered Site Reliability Engineering (SRE) agent for Root Cause Analysis (RCA)
    What is Active Telemetry
    Launching an agentic SRE for root cause analysis
    Paving the way for a new era: Mezmo's Active Telemetry
    The Answer to SRE Agent Failures: Context Engineering
    Empowering an MCP server with a telemetry pipeline
    The Debugging Bottleneck: A Manual Log-Sifting Expedition
    The Smartest Member of Your Developer Ecosystem: Introducing the Mezmo MCP Server
    Your New AI Assistant for a Smarter Workflow
    The Observability Problem Isn't Data Volume Anymore—It's Context
    Beyond the Pipeline: Data Isn't Oil, It's Power.
    The Platform Engineer's Playbook: Mastering OpenTelemetry & Compliance with Mezmo and Dynatrace
    From Alert to Answer in Seconds: Accelerating Incident Response in Dynatrace
    Taming Your Dynatrace Bill: How to Cut Observability Costs, Not Visibility
    Architecting for Value: A Playbook for Sustainable Observability
    How to Cut Observability Costs with Synthetic Monitoring and Responsive Pipelines
    Unlock Deeper Insights: Introducing GitLab Event Integration with Mezmo
    Introducing the New Mezmo Product Homepage
    The Inconvenient Truth About AI Ethics in Observability
    Observability's Moneyball Moment: How AI Is Changing the Game (Not Ending It)
    Do you Grok It?
    Top Five Reasons Telemetry Pipelines Should Be on Every Engineer’s Radar
    Is It a Cup or a Pot? Helping You Pinpoint the Problem—and Sleep Through the Night
    Smarter Telemetry Pipelines: The Key to Cutting Datadog Costs and Observability Chaos
    Why Datadog Falls Short for Log Management and What to Do Instead
    Telemetry for Modern Apps: Reducing MTTR with Smarter Signals
    Transforming Observability: Simpler, Smarter, and More Affordable Data Control
    Datadog: The Good, The Bad, The Costly
    Mezmo Recognized with 25 G2 Awards for Spring 2025
    Reducing Telemetry Toil with Rapid Pipelining
    Cut Costs, Not Insights:   A Practical Guide to Telemetry Data Optimization
    Webinar Recap: Telemetry Pipeline 101
    Petabyte Scale, Gigabyte Costs: Mezmo’s Evolution from ElasticSearch to Quickwit
    2024 Recap - Highlights of Mezmo’s product enhancements
    My Favorite Observability and DevOps Articles of 2024
    AWS re:Invent ‘24: Generative AI Observability, Platform Engineering, and 99.9995% Availability
    From Gartner IOCS 2024 Conference: AI, Observability Data, and Telemetry Pipelines
    Our team’s learnings from Kubecon: Use Exemplars, Configuring OTel, and OTTL cookbook
    How Mezmo Uses a Telemetry Pipeline to Handle Metrics, Part II
    Webinar Recap: 2024 DORA Report: Accelerate State of DevOps
    Kubecon ‘24 recap: Patent Trolls, OTel Lessons at Scale, and Principle Platform Abstractions
    Announcing Mezmo Flow: Build a Telemetry Pipeline in 15 minutes
    Key Takeaways from the 2024 DORA Report
    Webinar Recap | Telemetry Data Management: Tales from the Trenches
    What are SLOs/SLIs/SLAs?
    Webinar Recap | Next Gen Log Management: Maximize Log Value with Telemetry Pipelines
    Creating In-Stream Alerts for Telemetry Data
    Creating Re-Usable Components for Telemetry Pipelines
    Optimizing Data for Service Management Objective Monitoring
    More Value From Your Logs: Next Generation Log Management from Mezmo
    A Day in the Life of a Mezmo SRE
    Webinar Recap: Applying a Data Engineering Approach to Telemetry Data
    Dogfooding at Mezmo: How we used telemetry pipeline to reduce data volume
    Unlocking Business Insights with Telemetry Pipelines
    Why Your Telemetry (Observability) Pipelines Need to be Responsive
    How Data Profiling Can Reduce Burnout
    Data Optimization Technique: Route Data to Specialized Processing Chains
    Data Privacy Takeaways from Gartner Security & Risk Summit
    Mastering Telemetry Pipelines: Driving Compliance and Data Optimization
    A Recap of Gartner Security and Risk Summit: GenAI, Augmented Cybersecurity, Burnout
    Why Telemetry Pipelines Should Be A Part Of Your Compliance Strategy
    Pipeline Module: Event to Metric
    Telemetry Data Compliance Module
    OpenTelemetry: The Key To Unified Telemetry Data
    Data optimization technique: convert events to metrics
    What’s New With Mezmo: In-stream Alerting
    How Mezmo Used Telemetry Pipeline to Handle Metrics
    Webinar Recap: Mastering Telemetry Pipelines - A DevOps Lifecycle Approach to Data Management
    Open-source Telemetry Pipelines: An Overview
    SRECon Recap: Product Reliability, Burn Out, and more
    Webinar Recap: How to Manage Telemetry Data with Confidence
    Webinar Recap: Myths and Realities in Telemetry Data Handling
    Using Vector to Build a Telemetry Pipeline Solution
    Managing Telemetry Data Overflow in Kubernetes with Resource Quotas and Limits
    How To Optimize Telemetry Pipelines For Better Observability and Security
    Gartner IOCS Conference Recap: Monitoring and Observing Environments with Telemetry Pipelines
    AWS re:Invent 2023 highlights: Observability at Stripe, Capital One, and McDonald’s
    Webinar Recap: Best Practices for Observability Pipelines
    Introducing Responsive Pipelines from Mezmo
    My First KubeCon - Tales of the K8’s community, DE&I, sustainability, and OTel
    Modernize Telemetry Pipeline Management with Mezmo Pipeline as Code
    How To Profile and Optimize Telemetry Data: A Deep Dive
    Kubernetes Telemetry Data Optimization in Five Steps with Mezmo
    Introducing Mezmo Edge: A Secure Approach To Telemetry Data
    Understand Kubernetes Telemetry Data Immediately With Mezmo’s Welcome Pipeline
    Unearthing Gold: Deriving Metrics from Logs with Mezmo Telemetry Pipeline
    Webinar Recap: The Single Pane of Glass Myth
    Empower Observability Engineers: Enhance Engineering With Mezmo
    Webinar Recap: How to Get More Out of Your Log Data
    Unraveling the Log Data Explosion: New Market Research Shows Trends and Challenges
    Webinar Recap: Unlocking the Full Value of Telemetry Data
    Data-Driven Decision Making: Leveraging Metrics and Logs-to-Metrics Processors
    How To Configure The Mezmo Telemetry Pipeline
    Supercharge Elasticsearch Observability With Telemetry Pipelines
    Enhancing Grafana Observability With Telemetry Pipelines
    Optimizing Your Splunk Experience with Telemetry Pipelines
    Webinar Recap: Unlocking Business Performance with Telemetry Data
    Enhancing Datadog Observability with Telemetry Pipelines
    Transforming Your Data With Telemetry Pipelines