Source: Dynatrace, "The State of Log Management 2026." Survey of 450 global IT leaders; conducted by Coleman Parkes, January–February 2026. Figures are vendor-supplied and unaudited.
Enterprises are paying $2.5 million a year to throw away most of their operational data. When AI agents make a wrong call, that missing data is what would have explained why. The accountability gap and the cost-control behavior are the same problem.
Back at Network Solutions, long before observability was a product category, I used to read logs the way other people read the morning paper. No formal workflow, no assigned process. Pure curiosity, and a desire to learn Unix well enough to query whatever the system had recorded. When customer support calls came in about a new website that wasn't resolving, the logs told the story before the support ticket did: the domain name system was throwing errors, the propagation had stalled, and the fix was already visible in the data if you knew where to look.
The one that stayed with me was daylight saving time. Cron jobs scheduled to run at 1 AM would silently fail twice a year because, on the night clocks spring forward, 1 AM does not exist. No error message. No alert. Just a gap in the log where the job should have been. You had to go looking for the absence.
Reading Dynatrace's new research, "The State of Log Management 2026," that memory came back. Because the core problem the report describes is the same one, scaled by several orders of magnitude and made structurally worse by how enterprises have responded to it. Artificial intelligence workloads generated a 93% average increase in log and telemetry volume over the past twelve months. The dominant response has been to throw most of it away. Nearly half of the 450 global information technology leaders surveyed report excluding an average of 86% of their log data from ingestion or analysis to keep costs manageable.
The conventional read on this research is: AI creates more data, traditional tools weren't built for that scale, something has to change. That's accurate. It also misses where the structural failure sits.
Enterprise teams adopted aggressive log filtering and sampling as a rational response to volume growth that predates the current AI wave. Cold storage tiering, schema-on-read architectures, and aggressive aggregation were all reasonable tools for controlling a cost line. The problem is that AI agents don't just generate more operational data. They generate data that carries accountability weight. When an AI agent takes an action in a production environment, whether it's remediating an infrastructure fault, routing a support ticket, or triggering a spend threshold, the log record of that decision chain is not optional background noise. It's the audit trail.
Discarding 86% of that trail on average doesn't reduce risk. It relocates it.
"As AI agents operate probabilistically, treating logs, metrics, traces, and events as separate signals is no longer viable." Mala Pillutla, VP of Log Management, Dynatrace
Mala Pillutla, Dynatrace's vice president of log management, frames the accountability argument in the research release in terms of architecture, not tooling. The probabilistic nature of AI agent behavior means that no single signal type tells the complete story. A log entry showing an agent accessed a resource is meaningless without the trace that shows what it was trying to accomplish, the metric that shows whether the outcome was within normal bounds, and the event record that shows whether a human policy governed the action. Treating those four as separate management problems, running through an average of seven different tools, is what creates blind spots.
The research finding that 71% of respondents struggle to collect and correlate AI health metrics across sources is a direct consequence of that fragmentation. It's not a tooling sophistication problem. It's an architectural one.
Existing log management tools now consume 45% of observability budgets on average, with annual spend near $2.5 million per organization (vendor-supplied, unaudited). Sixty-seven percent of respondents say the cost of those tools outweighs their value. That's a procurement argument waiting to happen in every organization running this configuration.
But the cost figure obscures something more operationally significant. A third of organizations are paying for redundant or underused observability features. More than a quarter are spending engineering cycles maintaining multiple tool integrations rather than advancing AI initiatives. That's not a budget problem. That's a capacity problem. The engineers who could be moving AI workloads from pilot to production are instead reconciling dashboards across seven separate systems that were never designed to share context with each other.
Eighty percent of respondents said that difficulty turning telemetry into actionable insights is negatively affecting customer experience and delaying AI projects. The causality here matters: the delay isn't because AI systems are failing. It's because the observability foundation can't produce the confidence needed to approve production deployment. AI trust is a telemetry problem before it's a model problem.
This research lands in a context that Dynatrace has been constructing methodically. The April 2026 acquisition of Bindplane, covered earlier on this site, put Dynatrace earlier in the telemetry pipeline than any observability vendor currently occupies. Built on OpenTelemetry, Bindplane makes filtering and routing decisions before data enters any storage or monitoring system. In a world where the volume problem is the primary operational stress, controlling the pipeline at the collection point is a structurally different position than competing at the analysis layer after data has already been ingested.
The "State of Log Management 2026" research effectively defines the market condition that makes the Bindplane acquisition strategic rather than incremental. If 86% of logs are being discarded downstream, the right answer isn't a better downstream tool. It's intelligent governance at the point of collection: deciding what to keep, enriching it with context while it's still in flight, and routing it once rather than correlating it across seven destinations after the fact.
Nearly three-quarters of respondents said AI workloads now require a platform-based approach to log management. Eighty-one percent said ingestion and processing must be open and automated for real-time analysis without indexing overhead or rehydration delays. Both of those preferences describe architecture, not point tools. And both describe what Dynatrace is positioning itself to deliver.
The seven-tool fragmentation problem isn't solved by adding an eighth tool for AI telemetry. The organizations that will get AI agents into production fastest are the ones that can collapse the correlation work into a single data plane, and eliminate the filtering-to-survive behavior by making selective retention intelligent rather than blunt.
The research finding that 84% of respondents say AI trust depends on log analytics that can predict and prevent problems is not a feature preference. It's a statement about what AI production readiness requires. An AI system that your monitoring stack can't explain, in advance, is one your change advisory board won't sign off on for production deployment. Every AI pilot that stalls in a staging environment because the security or operations team can't verify agent behavior is a version of that same problem.
This is where the Dynatrace argument becomes most commercially interesting. The company has spent the last three quarters positioning its platform as the layer that makes AI operations trustworthy, not just observable. The Q3 fiscal year 2026 results that showed 18% revenue growth were built on enterprise adoption framing around the reliability gap in autonomous operations. This research quantifies how many organizations have that gap and what it's costing them.
Dynatrace's unified observability argument depends on consolidation: fewer tools, a single data plane, intelligent filtering at collection rather than exclusion after ingest. The question your team needs to answer is whether your current seven-tool observability stack is a contractual problem or an architectural one. If the primary barrier to consolidation is vendor lock-in contracts expiring on different cycles, Dynatrace's platform pitch is a renewal conversation. If the barrier is that different tools own different environments with no shared schema, then the Bindplane-powered pipeline approach is the right evaluation path. Those are not the same procurement motion, and conflating them is where consolidation projects stall before they start.
Dynatrace. "The State of Log Management 2026." Dynatrace Research, June 2026. dynatrace.com
Pillutla, Mala. "How AI Workloads Are Changing What Logs Must Deliver, Forcing a New Strategy." Dynatrace Blog, 17 June 2026. dynatrace.com
"New Global Study Finds AI Is Breaking Enterprise Log Management." Business Wire, 17 June 2026. businesswire.com
