Companies are discarding the logs they need to catch a breach

Many large enterprises deliberately drop or short-retain the majority of logs to reduce observability costs, which weakens incident response and forensic capabilities. The report emphasizes that rising telemetry from AI workloads increases cost pressure and the value of discarded logs, calls out governance gaps where non-security teams set retention policies, and warns that AI agents consuming logs introduce additional attack surfaces such as log tampering or data poisoning.