Which configuration involves using feed management to pull data from each location and applying a label per log source?

• A. Configure feed management to pull data from each location and configure a namespace per log source.
• B. Configure feed management to pull data and configure an ingestion label per log source.
• C. Configure a Bindplane agent collecting Syslog from each location and configure a namespace per log source.
• D. Configure a Bindplane agent and an ingestion label per log source.

Answer: (B)

Using feed management to pull data from each location ensures centralized collection from all sources, while applying an ingestion label per log source attaches a clear, persistent tag to every event indicating its origin. Ingestion labels are metadata added at ingestion time, so they travel with the data through the pipeline and let you filter, search, and route logs by their specific source. This makes source-specific parsing rules, dashboards, and retention policies straightforward to apply, and it scales well as more locations are added.

Namespaces can separate data, but they’re not the same as tagging each event with its origin identifier. A BindPlane agent approach could also work in other contexts, but the scenario described emphasizes pulling with feed management and tagging via an ingestion label, which is the right combination to achieve per-source identification at ingestion.