I have decided to use clickhouse with that config because of missing S3 for logs and metrics for long term store.

  <clickhouse>
    <storage_configuration>
      <disks>
        <audit_s3>
          <type>s3</type>
          <endpoint>https://S3-EndPoint/{{ audit_bucket_name }}/clickhouse/</endpoint>
          <access_key_id>{{ clickhouse_audit_s3_access_key }}</access_key_id>
          <secret_access_key>{{ clickhouse_audit_s3_secret_key }}</secret_access_key>
        </audit_s3>
      </disks>
      <policies>
        <audit_tiered>
          <volumes>
            <default>
              <disk>default</disk>
            </default>
            <audit_s3>
              <disk>audit_s3</disk>
            </audit_s3>
          </volumes>
        </audit_tiered>
      </policies>
    </storage_configuration>
  </clickhouse>