Keep the investigation, not the whole transcript

How can an incident agent keep investigating a slow API when its evidence no longer fits in the model's input?