Pipeline savings
log10x_savingsCalculate pipeline savings: see bytes kept out of the SIEM, bytes indexed, and dollar ROI when an ingest rate is set; compare what-if SIEM destinations.
Instructions
Show pipeline savings: the bytes the Receiver keeps out of the SIEM (filtering and compact) and the bytes the Retriever indexed in the customer's bucket (priced at the SIEM rate, less storage, less what was streamed back), with a dollar overlay when an analyzer $/GB rate is set (account profile list price, or per-call effective_ingest_per_gb override). Without a rate, the headline is percent-and-bytes only: never a fabricated $1/GB number. Use for "how much are we saving", "pipeline ROI", or "what is the Log10x stack worth financially". Accepts siem_lens (what-if destination): keeps the measured volumes, prices + gates for that destination at list rates, and stamps siem_actual vs siem_lens in the envelope.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| view | No | Output format. Always "summary": the typed envelope (data.totals, data.edge, data.retriever, data.run_rate). Field retained for backward-compat. | summary |
| siem_lens | No | What-if destination lens: price the SAME real volumes at this destination's default rates instead of the connected pipeline's. Dollars switch to the lens destination default rate (env-configured rates never leak across destinations); the envelope stamps siem_actual vs siem_lens. Volumes/patterns are unaffected. | |
| timeRange | No | Time range. '24h' and '1d' are equivalent. | 7d |
| environment | No | Environment nickname | |
| storageCost | No | S3 storage cost in $/GB/month. Defaults to $0.023 (S3 Standard). | |
| analyzerCost | No | DEPRECATED alias for effective_ingest_per_gb. stack ingestion cost in $/GB. | |
| effective_ingest_per_gb | No | Customer-supplied stack ingestion cost in $/GB. When provided, rate_source=customer_supplied and dollars are populated. When omitted and no profile rate is available, rate_source=unset and the headline reports percent + bytes only (no dollars). |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| data | No | ||
| tool | Yes | ||
| view | No | summary | |
| images | No | ||
| actions | No | ||
| summary | Yes | ||
| warnings | No | ||
| truncated | No | ||
| next_cursor | No | ||
| render_hint | No | ||
| generated_at | Yes | ||
| schema_epoch | Yes | ||
| schema_version | Yes |