-
simonw Definitely not a full answer, but maybe a “good enough practice" could be gleaned from what AWS, themselves, do here (for example; 24h default, 1h optional)? aws.amazon.com/blogs/big-data/optimize-performance-and-reduce-costs-for-network-analytics-with-vpc-flow-logs-in-apache-parquet-format/