It appears security context for log data only supports filters, not lookup or joins. I need to apply security context for logs by annotations/labels on the process group producing the logs. Is there a way to accomplish this currently?
@ronmacdonald were you able to get a solution to this? did you end up putting in a RFE? If so can you share it here?
This is a feature based based on supported OA, AG, and possibly the operator (we are cloud native).
The config is in the “cloud and virtualization >> Kubernetes telemetry enrichment”
We are using k8 labels to set security_context. We are seeing the value miss for some expected log records and are in early stages of investigating.