Four monitoring tools you contracted. Four more you didn’t know you had. Panaptico discovers the shadow spend, maps capability overlap across every vendor, re-homes the workloads to a single platform, and closes the books on what gets retired.
Current · 4 sanctioned
Splunk
$3.20M/yr
Logs · SIEM-adjacent search
New Relic
$680K/yr
APM · browser · mobile
Dynatrace
$1.10M/yr
Infra · full-stack APM
AppDynamics
$940K/yr
Business APM · transaction analytics
+ 4 shadow · $587K/yr
Discovered by Panaptico — not on the CMDB.
Target
Datadog
Net savings
$3.41M/yr
$6.51M retired · $3.10M consolidated
The gap
01
Every consolidation starts with someone saying ‘we have four monitoring tools.’ Panaptico scans the environment and finds six, plus a Honeycomb POC that quietly became production.
02
Logs, APM, RUM, synthetic — each tool models them differently. Routing a workload requires translation, not copy-paste. Dashboards don’t port; they get rebuilt.
03
Cut the contract and the agent keeps running. Forget the agent and the bill renews. Consolidation without a sunset ledger is just an extra tool on top of the four you already had.
Shadow discovery
Panaptico scans egress traffic, billing systems, SSO logs, and cloud marketplaces — then reconciles against the sanctioned inventory. Every unsanctioned tenant surfaces with an owner attached.
Instances found
4
Owners identified
4 / 4
Shadow spend
$587K/yr
3× Grafana Cloud tenants
Platform, Data, Mobile eng
$180K
No SSO · personal billing · orphaned dashboards
2× New Relic accounts (out-of-contract)
Acquired team · legacy project
$240K
Auto-renewed · outside master agreement
Honeycomb POC in production
Checkout service
$95K
POC · no SSO · two engineers with keys
Datadog trial, never terminated
SRE sandbox
$72K
Trial became monthly · no owner on record
Capability overlap
Panaptico maps every capability against every vendor — primary, secondary, or absent — then routes the workload to the consolidated tool that keeps the primary owner closest to its original role.
Workload router
For each capability, Panaptico re-homes the workload to Datadog with a signed plan: agent swap, schema translation, ownership transfer, and dedup rules for the stuff that came from four sources.
From
To
Datadog Logs
Logs
7-day hot · 90-day cold · query-time rehydration
42 TB/day
From
To
Datadog APM
APM · tracing
three agents retired · OTel collector front-door
1,847 services
From
To
Datadog Infra
Infrastructure
agent swap · ETA W4 · zero data-gap window
3,100 hosts
From
To
Datadog RUM
RUM
SDK rewrite · session replay retained
41 apps
From
To
Datadog Synthetics
Synthetic
assertion re-authoring · public + private locations
317 checks
From
To
Datadog Dashboards
Dashboards
deduped · 312 merged · 142 retired as unused
722 → 268
From
To
Datadog Monitors
Alerts / monitors
491 retired as redundant · ownership re-signed
1,103 → 612
From
To
Datadog APM + custom metrics
Business txn analytics
gap remains · 80 txns re-instrumented in-app
1,400 txns
Consolidation economics
Retiring
$6.51M / yr
Splunk
$3.20M
New Relic
$680K
Dynatrace
$1.10M
AppDynamics
$940K
Shadow spend (4 instances)
$587K
Consolidated
$3.10M
Datadog · contracted · year-1 ramp included
Net savings / yr
$3.41M
52% reduction · signed by CFO
Payback period
4.2 mo
3-year NPV
$7.4M
Panaptico finds the shadow inventory, maps the overlap, routes the workloads, and closes the sunset ledger. The CFO gets the savings — and the proof.