Can't wait to learn how, like "collect" now means inspect, "monitor" now means permanently store. Assuming storage, it's simple: metadata, deduplication, compr

Can't wait to learn how, like "collect" now means inspect, "monitor" now means permanently store. Assuming storage, it's simple: metadata, deduplication, compression, selective monitoring, keeping only the logs but not the content (e.g. for YouTube videos), exclusion of certain bandwidth-intensive protocols, as 'thezilch mentioned...