Elasticsearch is good because it just ingests whatever you sent to it, which allows you to deliver solutions rather quickly.

Having said this, I agree there are better solutions. (Also, Elasticsearch shines because of its full text search capability, which is not often exploited in case of logs.)

Loki is fine (or better said, it will be fine once they finally release a version without write-out-of-order constrain) but I find its lack of high-availability solution a bit frustrating.

ClickHouse, on the other side, is just magnificent. I use it in combination with Vector as message pipeline solution (it's an alternative to Fluentd, let's say).

So, yes, Elasticsearch is just not great and not only for logs, but for everything else that doesn't require full text search, in my opinion.