A common client request I’ve gotten over the past several years is how to best manage growing data costs in the security information and event management (SIEM) system.