Which setup applies an ingestion label per log source when pulling data from multiple NAS locations into SecOps?

• A. Configure feed management to pull data and configure an ingestion label per log source.
• B. Configure Bindplane agent collecting Syslog from each location and configure a namespace per log source.
• C. Configure feed management to pull data from each location and configure a namespace per log source.
• D. Configure Bindplane agent and ingestion label per log source.

Answer: (A)

Tag data at ingestion to identify each log source as it enters SecOps. When pulling from multiple NAS locations, giving each log source its own ingestion label ensures every batch of logs is labeled with the correct source at the moment of ingestion. This makes it easy to filter, search, and apply source-specific policies or dashboards across all data coming in from different locations. Using feed management to pull data and assigning an ingestion label per log source directly achieves this per-source tagging.

Other approaches rely on organizing data with namespaces or using an agent path, which can separate data but don’t attach the per-source ingestion label in the same way, making source-specific analytics and policy enforcement less straightforward.