Is billed volume measured before or after a data processing pipeline?

Hi all,

I have WINEVTLOG arriving via the Ingestion API (Bindplane agents and gateways) into Google SecOps. I plan to add a data processing pipeline on that stream with a Transform processor that shortens each log.

The documentation says:

• "View billed ingestion volume": billing is based on raw log bytes ingested, measured from ingestion metrics with component = "Ingestion API".
• "Manage data processing pipelines": pipeline filters are applied after data has been received by the Chronicle Ingestion API.

So:

1. Is billed volume based on the log size before the pipeline or after it?
2. Does the same apply when a pipeline Filter drops a log entirely?

Thanks.