Skip to main content
Glama
log-10x

Log10x MCP Server

Official
by log-10x

Measure compaction

log10x_measure_compaction
Read-onlyIdempotent

Measure real per-pattern compaction ratios from a SIEM sample using the local tenx engine to replace generic savings estimates with measured values for this environment.

Instructions

Measure real per-pattern compaction ratios from a SIEM sample. Pulls sample_size events for a service over timeRange, runs them through the local tenx engine, and returns per-pattern compaction_ratio_x (original bytes / encoded bytes) derived from actual measurements. Use this to replace generic 5-10x estimates in log10x_estimate_savings and log10x_pattern_detail with measured values for this customer environment. Requires: tenx CLI installed locally (LOG10X_TENX_PATH or tenx on PATH) AND SIEM credentials (same as log10x_poc_from_siem). Confidence tiers: high (>=50 events), medium (10-49), low (<10). Results flow into log10x_estimate_savings to improve savings projections. REQUIRES a local engine: the tenx binary on PATH, or Docker with LOG10X_TENX_MODE=docker.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
serviceYesService name to scope the stack sample to. Used as the query filter (e.g., Datadog `service:<name>`, Splunk `sourcetype=<name>`, CloudWatch stream prefix).
timeRangeNoLookback window for the stack pull. Format: <N><unit> where unit is m (minutes), h (hours), or d (days). Default "24h".24h
environmentNoLog10x environment id. Omit to use the default environment.
sample_sizeNoNumber of events to pull from the stack for measurement. Default 500. Larger samples improve confidence (high confidence requires >=50 events per pattern) but take longer to pull and process.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
dataNo
toolYes
viewNosummary
imagesNo
actionsNo
summaryYes
warningsNo
truncatedNo
next_cursorNo
render_hintNo
generated_atYes
schema_epochYes
schema_versionYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv1.30.7

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the readOnlyHint/idempotentHint annotations, it discloses hard prerequisites (tenx CLI on PATH or LOG10X_TENX_PATH, Docker mode, SIEM credentials), the data-provenance chain, and confidence tiers keyed to event counts (high >=50, medium 10-49, low <10). This is exactly the behavioral context annotations cannot convey.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core action and value, and most sentences earn their place. There is some redundancy, however, as the local-engine requirement is effectively stated twice ('Requires: tenx CLI installed locally...' and 'REQUIRES a local engine: the tenx binary on PATH, or Docker...').

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Because an output schema exists, return values needn't be explained, and the description still covers the full operational picture: prerequisites, environment scoping, confidence behavior, and integration with downstream savings tools. Nothing an agent needs to call it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is already 100%, so the baseline is 3, but the description adds real meaning: it ties sample_size to confidence quality ('high confidence requires >=50 events per pattern') and explains the cost tradeoff of larger samples. It also frames timeRange as the measurement window, going beyond the schema's format description.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource ('Measure real per-pattern compaction ratios from a SIEM sample') and explains the mechanism (pulls events, runs through local tenx engine, returns compaction_ratio_x). It explicitly differentiates from siblings by naming log10x_estimate_savings and log10x_pattern_detail as the tools whose generic estimates it replaces.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives explicit routing: 'Use this to replace generic 5-10x estimates in log10x_estimate_savings and log10x_pattern_detail with measured values for this customer environment.' Prerequisites and the downstream flow into log10x_estimate_savings are stated, leaving little to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.