Which configuration would you implement if your goal is to pull data and tag using an ingestion label per log source?

• A. Configure feed management to pull data and configure an ingestion label per log source.
• B. Configure feed management to pull data from each location and configure a namespace per log source.
• C. Configure a Bindplane agent collecting Syslog from each location and configure a namespace per log source.
• D. Configure a Bindplane agent and an ingestion label per log source.

Answer: (D)

The main idea is to tag logs at ingestion so you can identify and route each source's data consistently. An ingestion label is attached to data as it enters the system, serving as a per-source tag that you can rely on for filtering, routing, and applying source-specific policies. A Bindplane agent runs at each log source to pull logs (like Syslog) and forward them into the ingestion pipeline. When you pair a Bindplane agent with an ingestion label for that log source, you achieve both pulling data from every location and tagging it appropriately at ingestion.

Other approaches either rely on a different mechanism for organizing data (like a namespace) rather than tagging at ingestion, or omit the agent needed to pull data from each source, making per-source tagging less straightforward.