In a multi-region NAS log ingestion scenario, which option uses a Bindplane agent collecting Syslog and an ingestion label per log source?

• A. Configure a Bindplane agent collecting Syslog from each location and configure a namespace per log source.
• B. Configure feed management to pull data and configure an ingestion label per log source.
• C. Configure a Bindplane agent and an ingestion label per log source.
• D. Configure feed management to pull data from each location and configure a namespace per log source.

Answer: (B)

In this setup, the goal is to identify and route logs by their source across multiple regions. Attaching an ingestion label to each log source provides a clear, consistent tag that travels with the data, making it easy to filter, query, and route as logs arrive from different locations. Using feed management to pull data from each location centralizes the ingestion path, while the per-log-source ingestion label keeps provenance clear and scalable as regions grow. This combination avoids the extra deployment overhead of managing a BindPlane agent at every site and provides the most flexible, scalable way to distinguish sources across regions.

Other options rely on namespaces instead of ingestion labels, which can complicate cross-region querying and policy application, or require deploying BindPlane agents in each location, adding operational overhead.