<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to direct logs to right bucket via openpipeline in Log Analytics</title>
    <link>https://community.dynatrace.com/t5/Log-Analytics/How-to-direct-logs-to-right-bucket-via-openpipeline/m-p/301722#M1595</link>
    <description>&lt;P&gt;There are two ways to control which Grail bucket your logs land in:&lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Option 1 — Bucket assignment processor in a pipeline (recommended)&lt;/STRONG&gt;&lt;/P&gt;
&lt;P&gt;In OpenPipeline, each pipeline has a dedicated&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;STRONG&gt;Storage&lt;/STRONG&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;stage that runs after all processing. You configure a&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;EM&gt;bucket assignment&lt;/EM&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;processor there:&lt;/P&gt;
&lt;OL&gt;
&lt;LI&gt;Go to&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;STRONG&gt;OpenPipeline → Logs&lt;/STRONG&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;and open (or create) the pipeline that matches your log source.&lt;/LI&gt;
&lt;LI&gt;In the&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;STRONG&gt;Storage&lt;/STRONG&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;stage, add a bucket assignment rule.&lt;/LI&gt;
&lt;LI&gt;Set a&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;STRONG&gt;match condition&lt;/STRONG&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;(e.g.,&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;CODE data-epitaxy-inline-code=""&gt;matchesPhrase(content, "my-app")&lt;/CODE&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;or check an attribute like&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;CODE data-epitaxy-inline-code=""&gt;k8s.namespace.name == "prod"&lt;/CODE&gt;) to select which records go where.&lt;/LI&gt;
&lt;LI&gt;Set the&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;STRONG&gt;target bucket&lt;/STRONG&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;for records that match.&lt;/LI&gt;
&lt;LI&gt;Add a fallback rule at the bottom (no condition) to catch everything else.&lt;/LI&gt;
&lt;/OL&gt;
&lt;P&gt;Rules are evaluated top-to-bottom — first match wins.&lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Option 2 — Send&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;CODE data-epitaxy-inline-code=""&gt;dt.system.bucket&lt;/CODE&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;at ingest time&lt;/STRONG&gt;&lt;/P&gt;
&lt;P&gt;If you control the sending side (e.g., a custom log shipper or the Logs Ingest API), you can set the&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;CODE data-epitaxy-inline-code=""&gt;dt.system.bucket&lt;/CODE&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;attribute directly on each log record before sending. OpenPipeline will honour it.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Documentation for OpenPipeline is here:&lt;BR /&gt;&lt;A href="https://docs.dynatrace.com/docs/platform/openpipeline" target="_blank"&gt;https://docs.dynatrace.com/docs/platform/openpipeline&lt;/A&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Thu, 09 Jul 2026 07:11:17 GMT</pubDate>
    <dc:creator>thomas_billi</dc:creator>
    <dc:date>2026-07-09T07:11:17Z</dc:date>
    <item>
      <title>How to direct logs to right bucket via openpipeline</title>
      <link>https://community.dynatrace.com/t5/Log-Analytics/How-to-direct-logs-to-right-bucket-via-openpipeline/m-p/301693#M1594</link>
      <description>&lt;P&gt;What is the best approach to direct my logs to the right bucket, making use of a openpipeline?&lt;/P&gt;
&lt;P&gt;Can anybody provide me more info/details how to do this?&lt;/P&gt;
&lt;P&gt;Thanks a lot&lt;/P&gt;</description>
      <pubDate>Thu, 09 Jul 2026 06:53:29 GMT</pubDate>
      <guid>https://community.dynatrace.com/t5/Log-Analytics/How-to-direct-logs-to-right-bucket-via-openpipeline/m-p/301693#M1594</guid>
      <dc:creator>JannickDT_CM</dc:creator>
      <dc:date>2026-07-09T06:53:29Z</dc:date>
    </item>
    <item>
      <title>Re: How to direct logs to right bucket via openpipeline</title>
      <link>https://community.dynatrace.com/t5/Log-Analytics/How-to-direct-logs-to-right-bucket-via-openpipeline/m-p/301722#M1595</link>
      <description>&lt;P&gt;There are two ways to control which Grail bucket your logs land in:&lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Option 1 — Bucket assignment processor in a pipeline (recommended)&lt;/STRONG&gt;&lt;/P&gt;
&lt;P&gt;In OpenPipeline, each pipeline has a dedicated&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;STRONG&gt;Storage&lt;/STRONG&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;stage that runs after all processing. You configure a&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;EM&gt;bucket assignment&lt;/EM&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;processor there:&lt;/P&gt;
&lt;OL&gt;
&lt;LI&gt;Go to&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;STRONG&gt;OpenPipeline → Logs&lt;/STRONG&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;and open (or create) the pipeline that matches your log source.&lt;/LI&gt;
&lt;LI&gt;In the&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;STRONG&gt;Storage&lt;/STRONG&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;stage, add a bucket assignment rule.&lt;/LI&gt;
&lt;LI&gt;Set a&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;STRONG&gt;match condition&lt;/STRONG&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;(e.g.,&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;CODE data-epitaxy-inline-code=""&gt;matchesPhrase(content, "my-app")&lt;/CODE&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;or check an attribute like&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;CODE data-epitaxy-inline-code=""&gt;k8s.namespace.name == "prod"&lt;/CODE&gt;) to select which records go where.&lt;/LI&gt;
&lt;LI&gt;Set the&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;STRONG&gt;target bucket&lt;/STRONG&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;for records that match.&lt;/LI&gt;
&lt;LI&gt;Add a fallback rule at the bottom (no condition) to catch everything else.&lt;/LI&gt;
&lt;/OL&gt;
&lt;P&gt;Rules are evaluated top-to-bottom — first match wins.&lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Option 2 — Send&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;CODE data-epitaxy-inline-code=""&gt;dt.system.bucket&lt;/CODE&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;at ingest time&lt;/STRONG&gt;&lt;/P&gt;
&lt;P&gt;If you control the sending side (e.g., a custom log shipper or the Logs Ingest API), you can set the&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;CODE data-epitaxy-inline-code=""&gt;dt.system.bucket&lt;/CODE&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;attribute directly on each log record before sending. OpenPipeline will honour it.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Documentation for OpenPipeline is here:&lt;BR /&gt;&lt;A href="https://docs.dynatrace.com/docs/platform/openpipeline" target="_blank"&gt;https://docs.dynatrace.com/docs/platform/openpipeline&lt;/A&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 09 Jul 2026 07:11:17 GMT</pubDate>
      <guid>https://community.dynatrace.com/t5/Log-Analytics/How-to-direct-logs-to-right-bucket-via-openpipeline/m-p/301722#M1595</guid>
      <dc:creator>thomas_billi</dc:creator>
      <dc:date>2026-07-09T07:11:17Z</dc:date>
    </item>
  </channel>
</rss>

