Skip to main content
Glama
log-10x

Log10x MCP Server

Official

Pipeline savings

log10x_savings
Read-onlyIdempotent

Calculate pipeline savings: see bytes kept out of the SIEM, bytes indexed, and dollar ROI when an ingest rate is set; compare what-if SIEM destinations.

Instructions

Show pipeline savings: the bytes the Receiver keeps out of the SIEM (filtering and compact) and the bytes the Retriever indexed in the customer's bucket (priced at the SIEM rate, less storage, less what was streamed back), with a dollar overlay when an analyzer $/GB rate is set (account profile list price, or per-call effective_ingest_per_gb override). Without a rate, the headline is percent-and-bytes only: never a fabricated $1/GB number. Use for "how much are we saving", "pipeline ROI", or "what is the Log10x stack worth financially". Accepts siem_lens (what-if destination): keeps the measured volumes, prices + gates for that destination at list rates, and stamps siem_actual vs siem_lens in the envelope.

Input Schema

NameRequiredDescriptionDefault
viewNoOutput format. Always "summary": the typed envelope (data.totals, data.edge, data.retriever, data.run_rate). Field retained for backward-compat.summary
siem_lensNoWhat-if destination lens: price the SAME real volumes at this destination's default rates instead of the connected pipeline's. Dollars switch to the lens destination default rate (env-configured rates never leak across destinations); the envelope stamps siem_actual vs siem_lens. Volumes/patterns are unaffected.
timeRangeNoTime range. '24h' and '1d' are equivalent.7d
environmentNoEnvironment nickname
storageCostNoS3 storage cost in $/GB/month. Defaults to $0.023 (S3 Standard).
analyzerCostNoDEPRECATED alias for effective_ingest_per_gb. stack ingestion cost in $/GB.
effective_ingest_per_gbNoCustomer-supplied stack ingestion cost in $/GB. When provided, rate_source=customer_supplied and dollars are populated. When omitted and no profile rate is available, rate_source=unset and the headline reports percent + bytes only (no dollars).

Output Schema

NameRequiredDescriptionDefault
dataNo
toolYes
viewNosummary
imagesNo
actionsNo
summaryYes
warningsNo
truncatedNo
next_cursorNo
render_hintNo
generated_atYes
schema_epochYes
schema_versionYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed2 schema fields changedv1.30.8
    • changedInput schema / properties / siem_lens / description
      Previous value: -"What-if destination lens: price the SAME real volumes at this destination's list rates instead of the connected pipeline's. Dollars switch to the lens list price (env-configured rates never leak across destinations); the envelope stamps siem_actual vs siem_lens. Volumes/patterns are unaffected."New value: +"What-if destination lens: price the SAME real volumes at this destination's default rates instead of the connected pipeline's. Dollars switch to the lens destination default rate (env-configured rates never leak across destinations); the envelope stamps siem_actual vs siem_lens. Volumes/patterns are unaffected."
    • changedInput schema / properties / view / description
      Previous value: -"Output format. Always \"summary\" — the typed envelope (data.totals, data.edge, data.retriever, data.run_rate). Field retained for backward-compat."New value: +"Output format. Always \"summary\": the typed envelope (data.totals, data.edge, data.retriever, data.run_rate). Field retained for backward-compat."
  2. First observedv1.30.7

TDQS

A4.2/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the readOnly/idempotent/openWorld annotations, the description discloses the critical fallback behavior (no fabricated $1/GB when no rate is set; headline degrades to percent-and-bytes), the rate_source states, and the cross-destination isolation rule (env-configured rates never leak, envelope stamps siem_actual vs siem_lens). That is substantive behavioral context an agent could not infer from annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The output content is front-loaded, then use cases, then the siem_lens clause, which is the right ordering. It is dense in places (nested parentheticals about pricing arithmetic) but every sentence carries information relevant to invocation; nothing is filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need no narrative, and the description covers the rate-absent and lens paths thoroughly for a 7-parameter read-only tool. The one real omission is disambiguation from the sibling savings/cost tools, which matters for correct tool selection in this crowded namespace.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is already 100%, so the baseline is 3, but the description adds genuine meaning: it explains siem_lens as a re-pricing lens that leaves volumes untouched, clarifies the effective_ingest_per_gb override precedence against the account profile rate, and ties a missing rate to the percent-and-bytes headline. It stops short of explaining view, timeRange, or storageCost, which remain schema-only.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific resource (pipeline savings) and spells out exactly which quantities are returned: bytes the Receiver keeps out of the SIEM and bytes the Retriever indexed, with an optional dollar overlay. It is far more than a restatement of the name. It does not, however, distinguish itself from the sibling log10x_estimate_savings or log10x_cost_options, leaving an agent to guess which savings tool to pick.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Clear usage triggers are given verbatim: 'how much are we saving', 'pipeline ROI', 'what is the Log10x stack worth financially', plus the specific condition for siem_lens (what-if destination pricing). No explicit when-not guidance or named alternative tool is provided, so an agent facing the savings/estimate_savings overlap gets no routing rule.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.