If your platform bill has a mystery line item, odds are it is logging.
Not because logging is bad. Because logging is easy to turn on and hard to turn down once people depend on it.
In Azure, a few clicks can start streaming diagnostics into Log Analytics, Application Insights, Sentinel, storage accounts, event hubs, and partner tools. That is great. It is also a budget decision made by whoever clicked the box.
Treat observability like architecture. Because it is.
TL;DR
· Logging spend is a design decision, not an ops surprise. If you did not choose it on purpose, you chose it by default.
· Three levers control most logging cost outcomes: what you collect, how long you keep it, and how you query it.
· The win is not 'log less'. The win is 'log the right things, for the right time, in the right place, with ownership'.