# Separating Capture Economics from Analytics Economics ## Capture everything cheaply, forward only what is worth paying for The core idea in one line: the cost of keeping data and the cost of analysing data have been welded together, and they do not have to be. Today a log is either sent to the SIEM at ingestion prices or thrown away. TelemetriX puts a step in between. Capture all of it at source, enrich it, then decide by policy what goes to the expensive tool and what goes to cheap storage that stays searchable. | Stated ratio | Meaning | | --- | --- | | 100% capture | nothing is dropped at the source | | 5 to 10% forwarded | only enriched signal reaches high-cost tools | | ~80% cost reduction | the resulting fall in downstream ingestion spend | | 75 to 90 days hot, 5+ years archive | searchable window plus long retention, 7-year option for regulated firms | > [!tip] The move that makes it work > Routing is decided ==after enrichment, not before capture==. Today teams must guess what matters while the data is still raw. Deciding later, with context attached, is a strictly better position and it is the whole product in one sentence. ## Why it matters This is the argument that turns a monitoring tool into infrastructure. It gives the buyer a saving they can measure in the first quarter, and it gives the seller a permanent position in the data path once the saving is proven. The ratios are the numbers to test in a pilot. An 80% reduction depends on how much of a customer's current ingestion is genuinely low-signal, and that varies by environment. → [[TelemetriX - Questions to Follow Up]] ## Related - [[Red Onion MOC]] - [[The Cost of Keeping Everything]] - [[What TelemetriX Does]] - [[Position Next to SIEM and Data Lake]] - [[data gravity]]