I wonder how this choice compares to using a hosted solution like Splunk (both in capabilities and cost).