We have Algorithm in place. Our system is capable of injesting terabytes of logs first it goes thru an algorithm that ranks every logs. ti simple put this, majority of logs are successful request or health checks or similar are ranked low and not sent to llm. Only those flagged above certain threshold are then analyzed by retrieving all the logs associated with it and analyzed for second time with LLM if its worthy of a ticket.