Pipeline control is the ability to route, filter, or transform log data as it moves from its source toward storage. It lets teams decide which events go to which destinations, discard data they do not need, or adjust records into a consistent format before they are retained.
In cybersecurity, these controls can reduce storage and ingestion costs while keeping useful evidence available for investigations. For example, a team might filter routine, low-value events from long-term storage or route sensitive logs to a restricted system. Poorly configured filters can remove evidence defenders later need, so pipeline rules should be documented, tested, and reviewed alongside retention and investigation requirements.