In many cases you have little control over the logs that get shipped to Humio over TCP or UDP (think commercial agents, appliances, switches, load-balancers, drug-infusion pumps, refrigerators, etc).
I many of those cases you end up with a single datasource in a dataspace which can lead to problems in very high throughput scenarios - thus it should be possible to select certain fields to be used as tags directly in the listener or parser configuration for Humio.
This was implemented quickly by @chvitved to fix an issue for us (Thanks! ❤️ ) but I might as well create an issue for it to document the effort.
In many cases you have little control over the logs that get shipped to Humio over TCP or UDP (think commercial agents, appliances, switches, load-balancers, drug-infusion pumps, refrigerators, etc).
I many of those cases you end up with a single datasource in a dataspace which can lead to problems in very high throughput scenarios - thus it should be possible to select certain fields to be used as tags directly in the listener or parser configuration for Humio.
This was implemented quickly by @chvitved to fix an issue for us (Thanks! ❤️ ) but I might as well create an issue for it to document the effort.