I was an engineer at Splunk for many years. I knew it cold.
I then joined a startup where they just used metrics and the logs TTLed out after just a week. They were just used for short term debugging.
The metrics were easier to put in, keep organized, make dashboards from, lighter, cheaper, better. I had been doing it wrong this whole time.
"expired" is the word you're looking for.
I was an engineer at Splunk for many years. I knew it cold.
I then joined a startup where they just used metrics and the logs TTLed out after just a week. They were just used for short term debugging.
The metrics were easier to put in, keep organized, make dashboards from, lighter, cheaper, better. I had been doing it wrong this whole time.