Log Analytics

I enabled journald monitoring for our system logs on EC2 for our k8 cluster.  Looking at raw log content, it appears some fields are mapped and others are missing.  The support page mentions a few fields that it is mapping but several others appear to be dropped (i.e. _PID, _CMDLINE...).  Am I able to get insight and modify the processing rules for these logs? ... View more

There is meta-data on those entities that would be very useful to be incorporated into a log record.  I understand DQL allows for joins and similar functions post processing, but this increases the complexity of DQL, inhibits adoption, and increases query expenses. ... View more

Topology (monitored entities) is not yet stored in Grail. Instead, the classic entity storage can be accessed via DQL through predefined views that are all prefixed with dt.entity.   1. Is topology stored in an independent graph database? And how DQL can MPP from the topology storage? 2. Is there any plan to store topology into grail, and may lead to any possible performance improvements? 3. Are there any examples that illustrate the benefits of correlating metric log trace events to a topology?   Thanks. ... View more