{"_index.md":"docs","administration\/_index.md":"administration","administration\/authentication\/AWS-Auth.md":"iam-roles-service-accounts","administration\/authentication\/AWS-IAM-role-authentication.md":"aws-iam-role-authentication","administration\/authentication\/GCP-Auth.md":"gcp-authentication","administration\/authentication\/_index.md":"auth-cloud-platform-integrations","administration\/authentication\/implement-saml\/_index.md":"saml-integration","administration\/authentication\/implement-saml\/azure-ad-saml.md":"azure-saml","administration\/authentication\/implement-saml\/cisco-duo-saml.md":"cisco-duo-saml","administration\/authentication\/implement-saml\/google-saml.md":"google-saml","administration\/authentication\/implement-saml\/okta-saml.md":"okta-saml","administration\/authentication\/implement-saml\/onelogin-saml.md":"onelogin-saml","administration\/authentication\/implement-saml\/ping-identity-saml.md":"ping-identity-saml","administration\/authentication\/kerberos-authentication.md":"kerberos-authentication","administration\/organization\/Create-organization.md":"create-organizations","administration\/organization\/_index.md":"manage-organizations","administration\/organization\/configure-org.md":"configure-organization","administration\/organization\/join-org.md":"join-organizations","administration\/organization\/plans.md":"plan","administration\/organization\/usage.md":"usage","administration\/users-access-auth\/_index.md":"user-access-auth","administration\/users-access-auth\/audit-logs.md":"audit-logs","administration\/users-access-auth\/manage-apis.md":"api-tokens","administration\/users-access-auth\/manage-users.md":"users","ai-team\/_index.md":"ai-team-parent","ai-team\/ai-team-events.md":"ai-team-events","ai-team\/ai-team-overview.md":"ai-team-overview","ai-team\/ai-team-performance.md":"ai-team-performance","ai-team\/channels\/_index.md":"channels-parent","ai-team\/channels\/activity.md":"activity","ai-team\/channels\/channels.md":"channels","ai-team\/channels\/direct-messages.md":"direct-messages","ai-team\/connectors\/Connectors-overview.md":"ai-connectors","ai-team\/connectors\/_index.md":"ai-connectors-parent","ai-team\/connectors\/event-connectors\/_index.md":"event-connectors","ai-team\/connectors\/event-connectors\/atlassian-connector\/_index.md":"atlassian-connector","ai-team\/connectors\/event-connectors\/aws-connector\/_index.md":"aws-connector","ai-team\/connectors\/event-connectors\/circleci-connector\/_index.md":"circleci-connector","ai-team\/connectors\/event-connectors\/custom-remote-mcp-connector\/_index.md":"custom-remote-mcp-connector","ai-team\/connectors\/event-connectors\/databricks-connector\/_index.md":"databricks-connector","ai-team\/connectors\/event-connectors\/documentation-connector\/_index.md":"documentation-connector","ai-team\/connectors\/event-connectors\/edge-delta-mcp-connector\/_index.md":"edge-delta-mcp-connector","ai-team\/connectors\/event-connectors\/elastic-mcp-connector\/_index.md":"elastic-mcp-connector","ai-team\/connectors\/event-connectors\/github-connector\/_index.md":"github-connector","ai-team\/connectors\/event-connectors\/gitlab-connector\/_index.md":"gitlab-connector","ai-team\/connectors\/event-connectors\/jenkins-connector\/_index.md":"jenkins-connector","ai-team\/connectors\/event-connectors\/launchdarkly-connector\/_index.md":"launchdarkly-connector","ai-team\/connectors\/event-connectors\/linear-connector\/_index.md":"linear-connector","ai-team\/connectors\/event-connectors\/microsoft-teams-connector\/_index.md":"microsoft-teams-connector","ai-team\/connectors\/event-connectors\/pagerduty-connector\/_index.md":"pagerduty-connector","ai-team\/connectors\/event-connectors\/pagerduty-connector\/pagerduty-integration.md":"pagerduty-integration-guide","ai-team\/connectors\/event-connectors\/sentry-connector\/_index.md":"sentry-connector","ai-team\/connectors\/event-connectors\/slack-connector\/_index.md":"slack-connector","ai-team\/connectors\/streaming-connectors\/_index.md":"streaming-connectors","ai-team\/connectors\/streaming-connectors\/azure-event-hub-connector\/_index.md":"azure-event-hub-connector","ai-team\/connectors\/streaming-connectors\/crowdstrike-fdr-connector\/_index.md":"crowdstrike-fdr-connector","ai-team\/connectors\/streaming-connectors\/datadog-agent-connector\/_index.md":"datadog-agent-connector","ai-team\/connectors\/streaming-connectors\/docker-logs-connector\/_index.md":"docker-logs-connector","ai-team\/connectors\/streaming-connectors\/elastic-api-connector\/_index.md":"filebeat-connector","ai-team\/connectors\/streaming-connectors\/exec-connector\/_index.md":"exec-connector","ai-team\/connectors\/streaming-connectors\/file-connector\/_index.md":"file-connector","ai-team\/connectors\/streaming-connectors\/fluentd-connector\/_index.md":"fluentd-connector","ai-team\/connectors\/streaming-connectors\/http-pull-connector\/_index.md":"http-pull-connector","ai-team\/connectors\/streaming-connectors\/https-connector\/_index.md":"https-connector","ai-team\/connectors\/streaming-connectors\/journald-connector\/_index.md":"journald-connector","ai-team\/connectors\/streaming-connectors\/kafka-connector\/_index.md":"kafka-connector","ai-team\/connectors\/streaming-connectors\/kubernetes-connector\/_index.md":"kubernetes-connector","ai-team\/connectors\/streaming-connectors\/kubernetes-events-connector\/_index.md":"kubernetes-events-connector","ai-team\/connectors\/streaming-connectors\/kubernetes-logs-connector\/_index.md":"kubernetes-logs-connector","ai-team\/connectors\/streaming-connectors\/otlp-connector\/_index.md":"otlp-connector","ai-team\/connectors\/streaming-connectors\/pubsub-connector\/_index.md":"pubsub-connector","ai-team\/connectors\/streaming-connectors\/s3-connector\/_index.md":"s3-connector","ai-team\/connectors\/streaming-connectors\/snmp-pull-connector\/_index.md":"snmp-pull-connector","ai-team\/connectors\/streaming-connectors\/snmp-trap-connector\/_index.md":"snmp-trap-connector","ai-team\/connectors\/streaming-connectors\/splunk-hec-connector\/_index.md":"splunk-hec-connector","ai-team\/connectors\/streaming-connectors\/splunk-tcp-connector\/_index.md":"splunk-tcp-connector","ai-team\/connectors\/streaming-connectors\/syslog-connector\/_index.md":"syslog-connector","ai-team\/connectors\/streaming-connectors\/tcp-connector\/_index.md":"tcp-connector","ai-team\/connectors\/streaming-connectors\/udp-connector\/_index.md":"udp-connector","ai-team\/connectors\/streaming-connectors\/windows-events-connector\/_index.md":"windows-events-connector","ai-team\/sandbox.md":"ai-team-sandbox","ai-team\/security-best-practices.md":"ai-team-security","ai-team\/settings.md":"ai-team-settings","ai-team\/teammates\/_index.md":"teammates-parent","ai-team\/teammates\/custom-teammates.md":"teammates","ai-team\/teammates\/prompt-terminology.md":"prompt-terminology","ai-team\/teammates\/specialized-teammates.md":"specialized-teammates","ai-team\/teammates\/version-history.md":"teammate-versioning","ai-team\/workflows\/_index.md":"workflows-section","ai-team\/workflows\/action-node\/_index.md":"workflow-action-node","ai-team\/workflows\/action-node\/ai-conversation-action.md":"workflow-action-ai-conversation","ai-team\/workflows\/action-node\/jira-actions.md":"workflow-action-jira","ai-team\/workflows\/action-node\/ms-teams-actions.md":"workflow-action-ms-teams","ai-team\/workflows\/action-node\/pagerduty-actions.md":"workflow-action-pagerduty","ai-team\/workflows\/action-node\/send-email-action.md":"workflow-action-email","ai-team\/workflows\/action-node\/slack-actions.md":"workflow-action-slack","ai-team\/workflows\/default-workflows.md":"default-workflows","ai-team\/workflows\/if-else-node.md":"workflow-if-else-node","ai-team\/workflows\/note-node.md":"workflow-note-node","ai-team\/workflows\/start-node.md":"workflow-start-node","ai-team\/workflows\/task-node.md":"workflow-task-node","ai-team\/workflows\/teammate-node.md":"workflow-teammate-node","ai-team\/workflows\/transform-node.md":"workflow-transform-node","ai-team\/workflows\/workflow-patterns.md":"workflow-patterns","ai-team\/workflows\/workflows-overview.md":"workflow-overview","configuration\/CEL_macros.md":"cel-macros","configuration\/Effective-Pipeline-Design.md":"design-test-nodes","configuration\/_index.md":"configuration-parent","configuration\/agent_settingsv3.md":"vpb-agent-settings","configuration\/configuration-overview.md":"configuration","configuration\/create-a-pipeline.md":"best-practice","configuration\/knowledge-library.md":"knowledge-library","configuration\/live-capture\/_index.md":"live-capture","configuration\/live-capture\/debug-output.md":"debug-output-page","configuration\/manage-lookups.md":"howto-lookup-tables","configuration\/pipeline-settings.md":"pipeline-settings","configuration\/pipeline-triggers\/_index.md":"pipeline-triggers","configuration\/pipelines-view.md":"pipelines-view","configuration\/secrets\/_index.md":"secrets","configuration\/secrets\/create-secrets-cli.md":"create-secrets-cli","configuration\/secrets\/create-secrets-gui.md":"create-secrets-gui","configuration\/secrets\/secrets-aws-s3.md":"secrets-example-aws-s3","configuration\/secrets\/secrets-datadog.md":"secrets-example-datadog","configuration\/secrets\/secrets-elasticsearch.md":"secrets-example-elasticsearch","configuration\/secrets\/secrets-http.md":"secrets-example-http","configuration\/secrets\/secrets-kafka.md":"secrets-example-kafka","configuration\/secrets\/secrets-postgresql.md":"secrets-example-postgresql","configuration\/secrets\/secrets-splunk.md":"secrets-example-splunk","configuration\/yaml-reference\/_index.md":"configuration-yaml","configuration\/yaml-reference\/configmaps.md":"configmaps-v3","core-concepts\/_index.md":"core-concepts-parent","core-concepts\/ai-team.md":"ai-team-fundamentals","core-concepts\/aiops\/_index.md":"aiops","core-concepts\/anomaly-detection-insights\/_index.md":"anomaly-detection","core-concepts\/core-overview.md":"core-concepts","core-concepts\/data-reduction\/_index.md":"data-reduction","core-concepts\/data-reduction\/data-reduction-examples.md":"data-reduction-examples","core-concepts\/data-reduction\/reduce-metric-cardinality.md":"reduce-metric-cardinality","core-concepts\/data-tiering\/_index.md":"in-cluster-processing","core-concepts\/flow-control.md":"flow-control","core-concepts\/kafka-security-monitoring.md":"kafka-security-monitoring","core-concepts\/mcp.md":"edge-delta-mcp-overview","core-concepts\/metrics\/_index.md":"metrics-concepts","core-concepts\/metrics\/metric-cardinality.md":"metric-cardinality","core-concepts\/metrics\/metric-temporality.md":"metric-temporality","core-concepts\/monitoring-visibility.md":"monitoring-visibility","core-concepts\/processors.md":"processors","core-concepts\/routing-filtering-aggregation\/_index.md":"directed-data-flow","core-concepts\/security-and-compliance.md":"data-privacy-compliance","core-concepts\/telemetry-pipelines\/_index.md":"pipelines-dashboard","core-concepts\/troubleshooting-diagnostics.md":"troubleshooting-diagnostics","destinations\/Destinations-library.md":"destination-configs","destinations\/_index.md":"destinations-parent","destinations\/circuit-breaker.md":"circuit-breaker","destinations\/custom\/OTLP-destination.md":"otlp-output-node","destinations\/custom\/_index.md":"custom-destinations","destinations\/custom\/http_output.md":"http-output-node","destinations\/custom\/kafka\/_index.md":"kafka-destinations","destinations\/custom\/kafka\/kafka-destination.md":"kafka-output-node","destinations\/custom\/kafka\/send-to-kafka.md":"prepare-kafka-output","destinations\/custom\/openmetrics_output.md":"openmetrics-output-node","destinations\/custom\/prometheus_output.md":"prometheus-output-node","destinations\/custom\/prometheus_remote_write.md":"prometheus-remote-write-destination","destinations\/custom\/slack_output.md":"slack-output-node","destinations\/custom\/tcp_output.md":"tcp-output-node","destinations\/custom\/teams\/_index.md":"teams-destinations","destinations\/custom\/teams\/send-to-teams-power-automate.md":"send-to-teams-power-automate","destinations\/custom\/teams\/teams-destination.md":"teams-output-node","destinations\/custom\/webhook\/_index.md":"webhook-output-node","destinations\/custom\/webhook\/pipe-to-slack.md":"prepare-slack-edge-output","destinations\/custom\/webhook\/send-metrics-custom-api.md":"send-metrics-custom-api","destinations\/custom\/webhook\/send-metrics-to-webhook.md":"send-metrics-to-webhook","destinations\/custom\/webhook\/send-to-opsgenie.md":"send-to-opsgenie","destinations\/custom\/webhook\/send-to-pagerduty.md":"send-to-pagerduty","destinations\/custom\/webhook\/send-to-servicenow.md":"send-to-servicenow","destinations\/custom\/webhook\/send-to-webhook.md":"prepare-webhook-output","destinations\/destinations-overview.md":"destinations","destinations\/observability-tools\/_index.md":"observability-tools","destinations\/observability-tools\/aws_cloudwatch_destination.md":"amazon-cloudwatch-destination-node","destinations\/observability-tools\/azure-log-analytics\/_index.md":"azure-log-analytics-destinations","destinations\/observability-tools\/azure-log-analytics\/azure-log-analytics-destination.md":"azure-log-analytics-destination-node","destinations\/observability-tools\/azure-log-analytics\/integration\/_index.md":"how-to-azure-log-analytics","destinations\/observability-tools\/azure-log-analytics\/integration\/sample-logs.md":"log-analytics-workspace-table-sample","destinations\/observability-tools\/azure-log-analytics\/integration\/sample-patterns.md":"log-analytics-workspace-table-patterns","destinations\/observability-tools\/crowdstrike_falcon_logscale_output.md":"crowdstrike_falcon_logscale_output_node","destinations\/observability-tools\/datadog-output\/_index.md":"datadog-destinations","destinations\/observability-tools\/datadog-output\/datadog-destination.md":"datadog-output-node","destinations\/observability-tools\/datadog-output\/send-to-datadog.md":"prepare-datadog-output","destinations\/observability-tools\/debug-output.md":"debug-output","destinations\/observability-tools\/dynatrace_output.md":"dynatrace-output-node","destinations\/observability-tools\/edge-delta\/_index.md":"edge-delta-destinations","destinations\/observability-tools\/edge-delta\/ed_ai_event_output.md":"ai-event-output-node","destinations\/observability-tools\/edge-delta\/ed_gateway_connection.md":"gateway-output-node","destinations\/observability-tools\/edge-delta\/ed_log_output.md":"ed-log-output-node","destinations\/observability-tools\/edge-delta\/ed_metrics.md":"ed-metrics-node","destinations\/observability-tools\/edge-delta\/ed_output.md":"ed-output-node","destinations\/observability-tools\/edge-delta\/ed_pattern.md":"ed-pattern-node","destinations\/observability-tools\/edge-delta\/ed_traces_destination.md":"ed-traces-destination-node","destinations\/observability-tools\/elastic-output\/_index.md":"elastic-destinations","destinations\/observability-tools\/elastic-output\/elastic-destination.md":"elastic-output-node","destinations\/observability-tools\/elastic-output\/send-to-elastic.md":"prepare-elastic-output","destinations\/observability-tools\/elastic-output\/send-to-opensearch.md":"prepare-opensearch-output","destinations\/observability-tools\/fluentd_output.md":"fluentd-output-node","destinations\/observability-tools\/google-cloud-logging\/_index.md":"google-cloud-logging-destinations","destinations\/observability-tools\/google-cloud-logging\/gcl-destination.md":"google-cloud-logging-with-ottl-output","destinations\/observability-tools\/google-cloud-logging\/send-to-gcl.md":"gcl-output-prep","destinations\/observability-tools\/grokstream_aiops_output.md":"grokstream-aiops-output-node","destinations\/observability-tools\/loki_output.md":"loki-output-node","destinations\/observability-tools\/new_relic_output.md":"new-relic-output-node","destinations\/observability-tools\/splunk\/_index.md":"splunk-destination","destinations\/observability-tools\/splunk\/send-to-splunk.md":"splunk-output-prep","destinations\/observability-tools\/splunk\/splunk_hec_output.md":"splunk-output-node","destinations\/observability-tools\/splunk\/splunk_lb_output.md":"splunk-lb-output-node","destinations\/observability-tools\/splunk\/splunk_tcp_output.md":"splunk-tcp-output-node","destinations\/observability-tools\/sumo_logic_output.md":"sumo-logic-output-node","destinations\/observability-tools\/victoria-metrics\/_index.md":"victoria-metrics-destinations","destinations\/observability-tools\/victoria-metrics\/send-to-victoria-metrics.md":"prepare-output-to-victoriametrics","destinations\/security-siem\/_index.md":"security-siem-destinations","destinations\/security-siem\/exabeam_output.md":"exabeam-output-node","destinations\/security-siem\/google_secops_output.md":"google-secops-output-node","destinations\/security-siem\/ibm_qradar_output.md":"ibm-qradar-output-node","destinations\/security-siem\/microsoft-sentinel\/_index.md":"microsoft-sentinel-destinations","destinations\/security-siem\/microsoft-sentinel\/integration\/DCR_template.md":"data-collection-rule-template","destinations\/security-siem\/microsoft-sentinel\/integration\/_index.md":"how-to-sentinel","destinations\/security-siem\/microsoft-sentinel\/sentinel-destination.md":"azure-sentinel-output-node","destinations\/security-siem\/securonix_output.md":"securonix-output-node","destinations\/security-siem\/siem-migration-best-practices.md":"siem-migration-best-practices","destinations\/storage-data-lakes\/_index.md":"storage-data-lake-destinations","destinations\/storage-data-lakes\/apache_kudu_output.md":"apache-kudu-output-node","destinations\/storage-data-lakes\/azure_blob_output.md":"azure-blob-output-node","destinations\/storage-data-lakes\/bigquery\/_index.md":"bigquery-destinations","destinations\/storage-data-lakes\/bigquery\/bigquery-destination.md":"google-cloud-bigquery-output-node","destinations\/storage-data-lakes\/bigquery\/send-to-bigquery.md":"bigquery-output-prep","destinations\/storage-data-lakes\/clickhouse_output.md":"clickhouse-output-node","destinations\/storage-data-lakes\/digital_ocean_spaces_output.md":"digitalocean-spaces-output-node","destinations\/storage-data-lakes\/gcs-output\/_index.md":"gcs-destinations","destinations\/storage-data-lakes\/gcs-output\/gcs-destination.md":"gcs-output-node","destinations\/storage-data-lakes\/gcs-output\/send-to-gcs.md":"send-to-gcs-output-node","destinations\/storage-data-lakes\/ibm_object_storage.md":"ibm-object-storage-output-node","destinations\/storage-data-lakes\/local_storage_output.md":"local-storage-output-node","destinations\/storage-data-lakes\/minio_output.md":"minio-output-node","destinations\/storage-data-lakes\/s3-output\/_index.md":"s3-destinations","destinations\/storage-data-lakes\/s3-output\/s3-destination.md":"s3-output-node","destinations\/storage-data-lakes\/s3-output\/send-to-s3.md":"s3-output-prep","destinations\/storage-data-lakes\/snowflake\/_index.md":"snowflake-destinations","destinations\/storage-data-lakes\/snowflake\/send-to-snowflake.md":"prepare-snowflake-kafka-output","destinations\/storage-data-lakes\/zenko_output.md":"zenko-output-node","getting-started\/_index.md":"getting-started","getting-started\/getting-started-ai-team.md":"getting-started-ai-team","getting-started\/quickstart-baremetal-vm.md":"quick-start-vm-bare-metal","getting-started\/quickstart-dash.md":"quickstart-dash","getting-started\/quickstart-extract-aggregate-metrics.md":"extract-aggregate-metrics","getting-started\/quickstart-kubernetes.md":"quick-start-k8s","getting-started\/quickstart-monitor.md":"quickstart-monitor","getting-started\/quickstart-pipeline-config\/_index.md":"quick-start-pipeline-parent","getting-started\/quickstart-pipeline-config\/add-demo-node.md":"quick-start-pipeline-config-01","getting-started\/quickstart-pipeline-config\/create-attributes.md":"quick-start-pipeline-config-04","getting-started\/quickstart-pipeline-config\/delete-attributes.md":"quick-start-pipeline-config-05","getting-started\/quickstart-pipeline-config\/extract-severity.md":"quick-start-pipeline-config-06","getting-started\/quickstart-pipeline-config\/extract-timestamp.md":"quick-start-pipeline-config-07","getting-started\/quickstart-pipeline-config\/filter-logs.md":"quick-start-pipeline-config-02","getting-started\/quickstart-pipeline-config\/overview.md":"quick-start-pipeline-config","getting-started\/quickstart-pipeline-config\/save-and-deploy.md":"quick-start-pipeline-config-08","getting-started\/try-sandbox.md":"try-sandbox","installation\/Installation-overview.md":"agent-installation","installation\/_index.md":"agent-installation-parent","installation\/advanced-deployment-patterns\/AWS-systems-manager-distributor.md":"aws-smd","installation\/advanced-deployment-patterns\/Configmaps-secrets-images.md":"continuous-deployment","installation\/advanced-deployment-patterns\/_index.md":"deployment-patterns","installation\/advanced-deployment-patterns\/deployment-with-profiler.md":"install-profiler","installation\/advanced-deployment-patterns\/environment-variables.md":"environment-variables","installation\/advanced-deployment-patterns\/local-image.md":"image-store","installation\/advanced-deployment-patterns\/multi-tenant-multi-cluster-deployments\/_index.md":"multi-region-deployment","installation\/advanced-deployment-patterns\/scaling-federation-ha\/_index.md":"scaling-federation-ha","installation\/advanced-deployment-patterns\/scaling-federation-ha\/connect-edge-gw-coordinator.md":"integrate-pipeline-types","installation\/advanced-deployment-patterns\/scaling-federation-ha\/k8s-deployment-examples.md":"deployment-examples","installation\/advanced-deployment-patterns\/scaling-federation-ha\/scale-deployments.md":"scale-deployments","installation\/advanced-deployment-patterns\/scaling-federation-ha\/size-capacity-estimations.md":"size-capacity-estimations","installation\/advanced-deployment-patterns\/terraform-provider.md":"terraform-provider","installation\/cloud-pipelines.md":"cloud-pipelines","installation\/ed-watcher.md":"ed-watcher","installation\/ingestion-pipelines.md":"ingestion-pipelines","installation\/install-amazon-ecs.md":"install-amazon-ecs","installation\/install-docker.md":"install-docker","installation\/install-linux.md":"install-linux","installation\/install-mac.md":"install-macos","installation\/install-windows.md":"install-windows","installation\/kubernetes-overview\/OpenShift-clusters.md":"openshift-clusters","installation\/kubernetes-overview\/SELinux.md":"selinux-enforced-cluster","installation\/kubernetes-overview\/_index.md":"install-kubernetes","installation\/kubernetes-overview\/helm-values\/_index.md":"helm-values","installation\/kubernetes-overview\/helm-values\/coordinator.md":"helm-values-coordinator","installation\/kubernetes-overview\/helm-values\/gateway.md":"helm-values-gateway","installation\/kubernetes-overview\/helm-values\/node-agent.md":"helm-values-node-agent","installation\/kubernetes-overview\/helm-values\/shared-values.md":"helm-values-shared","installation\/kubernetes-overview\/install-kubernetes-helm.md":"install-helm","installation\/kubernetes-overview\/install-kubernetes-kubectl.md":"install-kubectl","installation\/kubernetes-overview\/k8s-manifests.md":"kubernetes-manifests-described","installation\/kubernetes-overview\/proxy-configuration.md":"proxy-configuration","installation\/product-architecture.md":"edge-delta-architecture","installation\/system-requirements.md":"system-requirements","installation\/upgrade.md":"upgrade","integrations\/_index.md":"integration-parent","integrations\/agentless-telemetry\/_index.md":"third-party-agents","integrations\/agentless-telemetry\/aws-lambda\/_index.md":"aws-lambda","integrations\/agentless-telemetry\/aws-lambda\/lambda-extension.md":"aws-lambda-extension","integrations\/agentless-telemetry\/aws-lambda\/lambda-forwarder.md":"aws-lambda-forwarder","integrations\/agentless-telemetry\/ecs-aws-otel-collector.md":"ecs-aws-otel-collector","integrations\/agentless-telemetry\/ingest-from-ecs.md":"ingest-from-ecs","integrations\/agentless-telemetry\/otel-agents.md":"otel-with-cloud-pipelines","integrations\/audit-logs\/_index.md":"audit-logs-integrations","integrations\/audit-logs\/ingest-audit-logs.md":"ingest-audit-logs","integrations\/audit-logs\/ingest-rds-metrics-from-cloudwatch.md":"rds-cloudwatch-metrics-ingestion","integrations\/hybrid-log-search\/_index.md":"hybrid-log-search-install","integrations\/instrument-otel\/_index.md":"instrument-using-otel","integrations\/instrument-otel\/dotnet.md":"instrument-dotnet-otel","integrations\/instrument-otel\/golang.md":"instrument-golang-otel","integrations\/instrument-otel\/java.md":"instrument-java-otel","integrations\/instrument-otel\/nodejs.md":"instrument-nodejs-otel","integrations\/instrument-otel\/python.md":"instrument-python-otel","integrations\/instrument-otel\/zero-code-dotnet.md":"zero-code-instrument-dotnet-otel","integrations\/instrument-otel\/zero-code-golang.md":"zero-code-instrument-golang-otel","integrations\/instrument-otel\/zero-code-java.md":"zero-code-instrument-java-otel","integrations\/instrument-otel\/zero-code-nodejs.md":"zero-code-instrument-nodejs-otel","integrations\/instrument-otel\/zero-code-python.md":"zero-code-instrument-python-otel","integrations\/integrations-overview.md":"integrations","integrations\/legacy-integrations.md":"integration-configs2","opentelemetry\/_index.md":"opentelemetry","opentelemetry\/instrument-your-code.md":"otel-instrumentation","opentelemetry\/otel-collector.md":"otel-collector-setup","opentelemetry\/otlp-destination.md":"otlp-destination-guide","opentelemetry\/transform-otel-data.md":"transform-otel-data","opentelemetry\/troubleshooting.md":"otel-troubleshooting","overview\/_index.md":"overview","platform\/_index.md":"platform-features-parent","platform\/dashboards\/_index.md":"dashboards-library","platform\/dashboards\/create-dashboard.md":"create-dashboard","platform\/dashboards\/default-dash.md":"default-dashboards-library","platform\/dashboards\/private-dashboards.md":"private-dashboards","platform\/dashboards\/share-dashboard.md":"share-dashboard","platform\/dashboards\/variables.md":"dashboard-variables","platform\/dashboards\/visualizing-maps.md":"visualizing-maps","platform\/dashboards\/widgets\/_index.md":"dashboard-widgets","platform\/dashboards\/widgets\/aggregation\/_index.md":"dashboard-aggregation-widget","platform\/dashboards\/widgets\/aggregation\/aggregation-event.md":"dashboard-aggregation-event-widget","platform\/dashboards\/widgets\/aggregation\/aggregation-log.md":"dashboard-aggregation-log-widget","platform\/dashboards\/widgets\/aggregation\/aggregation-metric.md":"dashboard-aggregation-metric-widget","platform\/dashboards\/widgets\/aggregation\/aggregation-pattern.md":"dashboard-aggregation-pattern-widget","platform\/dashboards\/widgets\/markdown.md":"dashboard-markdown-widget","platform\/dashboards\/widgets\/raw-table\/_index.md":"dashboard-raw-table-widget","platform\/dashboards\/widgets\/raw-table\/rawtable-log.md":"dashboard-raw-table-log-widget","platform\/dashboards\/widgets\/raw-table\/rawtable-trace.md":"dashboard-raw-table-trace-widget","platform\/dashboards\/widgets\/timeseries\/_index.md":"dashboard-timeseries-widget","platform\/dashboards\/widgets\/timeseries\/timeseries-event.md":"dashboard-timeseries-event-widget","platform\/dashboards\/widgets\/timeseries\/timeseries-log.md":"dashboard-timeseries-log-widget","platform\/dashboards\/widgets\/timeseries\/timeseries-metric.md":"dashboard-timeseries-metric-widget","platform\/dashboards\/widgets\/timeseries\/timeseries-pattern.md":"dashboard-timeseries-pattern-widget","platform\/dashboards\/widgets\/timeseries\/timeseries-trace.md":"dashboard-timeseries-trace-widget","platform\/events\/_index.md":"events-home","platform\/events\/kubernetes-events.md":"k8s-events","platform\/events\/monitor-events.md":"events","platform\/logs\/_index.md":"search-page","platform\/logs\/anomalies.md":"log-anomalies","platform\/logs\/effective-facets.md":"effective-facets","platform\/logs\/log-search-to-filter.md":"log-search-to-filter","platform\/logs\/logs-inventory.md":"use-log-inventory","platform\/logs\/pattern-to-filter.md":"pattern-to-filter","platform\/logs\/patterns.md":"patterns-page","platform\/metrics\/_index.md":"edge-delta-metrics","platform\/metrics\/explorer.md":"metrics-explorer","platform\/metrics\/interpret-metrics\/_index.md":"metrics-maturity","platform\/metrics\/interpret-metrics\/metrics-maturity-level1.md":"metrics-maturity-level1","platform\/metrics\/interpret-metrics\/metrics-maturity-level2.md":"metrics-maturity-level2","platform\/metrics\/interpret-metrics\/metrics-maturity-level3.md":"metrics-maturity-level3","platform\/metrics\/interpret-metrics\/metrics-maturity-level4.md":"metrics-maturity-level4","platform\/metrics\/interpret-metrics\/metrics-maturity-level5.md":"metrics-maturity-level5","platform\/metrics\/metrics-inventory.md":"use-metrics-inventory","platform\/metrics\/metrics-list.md":"metrics-list","platform\/monitors\/_index.md":"monitors","platform\/monitors\/composite-monitor.md":"composite-monitor","platform\/monitors\/log-threshold-monitor.md":"log-threshold-monitor","platform\/monitors\/metric-change-monitor.md":"metric-change-monitor","platform\/monitors\/metric-threshold-monitor.md":"metric-threshold-monitor","platform\/monitors\/monitor-notifications.md":"monitor-notifications","platform\/monitors\/pattern-anomaly-monitor.md":"pattern-anomaly-monitor","platform\/monitors\/send-to-api.md":"prepare-api-output","platform\/monitors\/send-to-channel.md":"send-to-channel","platform\/monitors\/send-to-dynatrace.md":"send-monitor-events-to-dynatrace","platform\/monitors\/send-to-slack.md":"prepare-slack-output","platform\/monitors\/send-to-workflow.md":"send-to-workflow","platform\/monitors\/synthetic-monitor.md":"synthetic-monitor","platform\/packs\/_index.md":"packs-parent","platform\/packs\/catalog\/_index.md":"pack-catalogue","platform\/packs\/catalog\/akamai.md":"akamai-pack","platform\/packs\/catalog\/argocd.md":"argocd-pack","platform\/packs\/catalog\/auth0.md":"auth0-pack","platform\/packs\/catalog\/awscloudtrail.md":"awscloudtrail-pack","platform\/packs\/catalog\/awscloudwatchforwarder.md":"awscloudwatchforwarder-pack","platform\/packs\/catalog\/awskinesis.md":"awskinesis-pack","platform\/packs\/catalog\/awslambda.md":"awslambda-pack","platform\/packs\/catalog\/awsvpcflow.md":"awsvpcflow-pack","platform\/packs\/catalog\/azurensg.md":"azurensg-pack","platform\/packs\/catalog\/cef.md":"cef-pack","platform\/packs\/catalog\/checkpoint.md":"checkpoint-pack","platform\/packs\/catalog\/ciscoasa.md":"ciscoasa-pack","platform\/packs\/catalog\/ciscosftd.md":"ciscosftd-pack","platform\/packs\/catalog\/cloudflare.md":"cloudflare-pack","platform\/packs\/catalog\/cmcd.md":"cmcd-pack","platform\/packs\/catalog\/datadogk8srosettastone.md":"datadogk8srosettastone-pack","platform\/packs\/catalog\/eddynamicflowcontrol.md":"eddynamicflowcontrol-pack","platform\/packs\/catalog\/eddynamicsamplecontrol.md":"eddynamicsamplecontrol-pack","platform\/packs\/catalog\/edlargemessage.md":"edlargemessage-pack","platform\/packs\/catalog\/f5firewall.md":"f5firewall-pack","platform\/packs\/catalog\/fortigate.md":"fortigate-pack","platform\/packs\/catalog\/gigamon.md":"gigamon-pack","platform\/packs\/catalog\/googlecloudaudit.md":"googlecloudaudit-pack","platform\/packs\/catalog\/istio.md":"istio-pack","platform\/packs\/catalog\/lookupexamples.md":"lookupexamples-pack","platform\/packs\/catalog\/microsoftactivity.md":"microsoftactivity-pack","platform\/packs\/catalog\/microsoftdns.md":"microsoftdns-pack","platform\/packs\/catalog\/mimecast.md":"mimecast-pack","platform\/packs\/catalog\/mysqlerror.md":"mysqlerror-pack","platform\/packs\/catalog\/mysqlslowquery.md":"mysqlslowquery-pack","platform\/packs\/catalog\/netskope.md":"netskope-pack","platform\/packs\/catalog\/newrelicentities.md":"newrelicentities-pack","platform\/packs\/catalog\/nginx.md":"nginx-pack","platform\/packs\/catalog\/okta.md":"okta-pack","platform\/packs\/catalog\/orcasecurity.md":"orcasecurity-pack","platform\/packs\/catalog\/paloalto.md":"paloalto-pack","platform\/packs\/catalog\/rds.md":"rds-pack","platform\/packs\/catalog\/redis.md":"redis-pack","platform\/packs\/catalog\/splunkrosettastone.md":"splunkrosettastone-pack","platform\/packs\/catalog\/syslog.md":"syslog-pack","platform\/packs\/catalog\/trendmicropack.md":"trendmicropack-pack","platform\/packs\/catalog\/windowsevent.md":"windowsevent-pack","platform\/packs\/catalog\/zscaler.md":"zscaler-pack","platform\/packs\/packs-overview.md":"packs","platform\/packs\/work-with-packs\/RBAC-compound-nodes.md":"configure-rbac-for-packs","platform\/packs\/work-with-packs\/_index.md":"work-with-packs","platform\/packs\/work-with-packs\/add-compound-node.md":"add-pack-to-pipeline","platform\/packs\/work-with-packs\/create-cn-from-pipe.md":"create-pack-from-pipeline","platform\/packs\/work-with-packs\/create-compount-node.md":"create-pack","platform\/packs\/work-with-packs\/deploy-changes-to-CNs.md":"deploy-pack-changes","platform\/packs\/work-with-packs\/packs-library.md":"pre-designed-pipeline-packs","platform\/platform-overview.md":"platform-overview","platform\/recommendations\/_index.md":"recommendations","platform\/rehydrations\/_index.md":"rehydrations","platform\/rehydrations\/deploy-rehydrations.md":"deploy-rehydrations","platform\/rehydrations\/mapping-rules.md":"rehydration-mapping-rules","platform\/rehydrations\/run-rehydrations.md":"run-rehydrations","platform\/service-map\/_index.md":"service-map","platform\/traces\/_index.md":"trace-explorer","platform\/traces\/correlate-logs-traces.md":"correlate-logs-traces","platform\/traces\/trace-tail-sampling.md":"trace-tail-sampling","processors\/Create-processor.md":"configure-a-processor","processors\/_index.md":"sequence-nodes","processors\/filter-processors\/_index.md":"filter-sequence-nodes","processors\/filter-processors\/deduplicate-logs.md":"deduplicate-logs-processor","processors\/filter-processors\/filter.md":"filter-processor","processors\/filter-processors\/ottl-context-filter.md":"ottl-context-filter-processor","processors\/filter-processors\/sample.md":"sample-processor","processors\/filter-processors\/tail-sample.md":"tail-sample-processor","processors\/legacy-nodes\/_index.md":"legacy-processor-nodes","processors\/legacy-nodes\/aggregate-metric.md":"aggregate-metric-node","processors\/legacy-nodes\/base64_decode.md":"base64-decode","processors\/legacy-nodes\/datadog_mapper.md":"datadog-mapper","processors\/legacy-nodes\/dedup.md":"dedup-node","processors\/legacy-nodes\/enrichment.md":"enrichment-node","processors\/legacy-nodes\/extract-metric.md":"extract-metric-node","processors\/legacy-nodes\/extract_json_field.md":"extract-json-field-node","processors\/legacy-nodes\/generic-transform.md":"generic-transform-node","processors\/legacy-nodes\/grok-parsing-node.md":"grok-parsing-node","processors\/legacy-nodes\/gzip_decompress.md":"gzip-decompress","processors\/legacy-nodes\/log_level_detector.md":"log-level-detector-node","processors\/legacy-nodes\/log_to_metric.md":"log-to-metric-node","processors\/legacy-nodes\/log_to_pattern.md":"log-to-pattern-node-legacy","processors\/legacy-nodes\/log_transform.md":"log-transform-node","processors\/legacy-nodes\/lookup.md":"lookup-node","processors\/legacy-nodes\/mask.md":"mask-node","processors\/legacy-nodes\/opentsdb_parse.md":"parse-opentsdb","processors\/legacy-nodes\/ottl_transform.md":"ottl-transform-node","processors\/legacy-nodes\/output_transform.md":"output-transform-node","processors\/legacy-nodes\/parse_json_attributes.md":"parse-json-node","processors\/legacy-nodes\/ratio.md":"ratio-node","processors\/legacy-nodes\/regex_filter.md":"regex-filter-node","processors\/legacy-nodes\/resource_transform.md":"resource-transform-node","processors\/legacy-nodes\/route.md":"route-node-legacy","processors\/legacy-nodes\/sample-processor.md":"sample-processor-node","processors\/legacy-nodes\/split_delimiter.md":"split-delimiter-node","processors\/legacy-nodes\/splunk_mapper.md":"splunk-mapper","processors\/legacy-nodes\/suppress.md":"suppress-processor-node","processors\/legacy-nodes\/threshold\/_index.md":"threshold-node","processors\/legacy-nodes\/threshold\/trigger-alert.md":"trigger-metric-alert-i5m","processors\/legacy-nodes\/top_k.md":"top-k-node","processors\/legacy-nodes\/unescape_json.md":"unescape-json-node","processors\/legacy-nodes\/unroll_json.md":"unroll-json-node","processors\/parse-processors\/_index.md":"parse-sequence-nodes","processors\/parse-processors\/parse-csv.md":"parse-csv-processor","processors\/parse-processors\/parse-grok.md":"parse-grok-processor","processors\/parse-processors\/parse-json.md":"parse-json-processor","processors\/parse-processors\/parse-key-value.md":"parse-key-value-processor","processors\/parse-processors\/parse-regex.md":"parse-regex-processor","processors\/parse-processors\/parse-severity-fields.md":"parse-severity-processor","processors\/parse-processors\/parse-timestamp.md":"parse-timestamp-processor","processors\/parse-processors\/parse-xml.md":"parse-xml-processor","processors\/processors-overview.md":"processors-overview","processors\/transform-processors\/_index.md":"transform-sequence-nodes","processors\/transform-processors\/add-field.md":"add-field-processor","processors\/transform-processors\/aggregate-metric.md":"aggregate-metric-processor","processors\/transform-processors\/copy-field.md":"copy-field-processor","processors\/transform-processors\/cumulative-to-delta.md":"cumulative-to-delta-processor","processors\/transform-processors\/delete-empty-values.md":"delete-empty-field-processor","processors\/transform-processors\/delete-field.md":"delete-field-processor","processors\/transform-processors\/deotel.md":"deotel-processor","processors\/transform-processors\/extract-metric.md":"extract-metric-processor","processors\/transform-processors\/log_to_pattern-metric.md":"log-to-pattern-node","processors\/transform-processors\/lookup\/_index.md":"lookup-processor","processors\/transform-processors\/lookup\/contain-match.md":"lookup-contain-match","processors\/transform-processors\/lookup\/exact-match.md":"lookup-exact-match","processors\/transform-processors\/lookup\/ftd-codes.md":"lookup-ftd-codes","processors\/transform-processors\/lookup\/lookup-tables.md":"lookup-tables","processors\/transform-processors\/lookup\/multiple-matches.md":"lookup-multiple-matches","processors\/transform-processors\/lookup\/prefix-match.md":"lookup-prefix-match","processors\/transform-processors\/lookup\/regex-match.md":"lookup-regex-match","processors\/transform-processors\/lookup\/suffix-match.md":"lookup-suffix-match","processors\/transform-processors\/mask.md":"mask-processor","processors\/transform-processors\/pack.md":"pack-processor","processors\/transform-processors\/redis-enrichment.md":"redis-enrichment-processor","processors\/transform-processors\/rollup-metric.md":"rollup-metric-processor","processors\/transform-processors\/stateful-alert.md":"stateful-alert-processor","processors\/transform-processors\/unroll-json.md":"unroll-json-processor","processors\/utility-processors\/_index.md":"utility-sequence-nodes","processors\/utility-processors\/code.md":"code-processor","processors\/utility-processors\/comment.md":"comment-processor","processors\/utility-processors\/conditional-group.md":"conditional-group-processor","processors\/utility-processors\/custom.md":"custom-processor","processors\/utility-processors\/route-ottl.md":"route-node","reference\/_index.md":"reference","reference\/benchmarks.md":"benchmarks","reference\/cql.md":"cql","reference\/feature-status.md":"feature-status","reference\/glossary\/index.md":"glossary","reference\/interpret-data-items\/_index.md":"data-item","reference\/interpret-data-items\/data-item-examples.md":"data-item-examples","reference\/ottl-language-guide\/_index.md":"ottl-statements","reference\/ottl-language-guide\/edx-custom-functions\/01-edx-functions-overview.md":"ottl-extensions-overview","reference\/ottl-language-guide\/edx-custom-functions\/_index.md":"ottl-extensions","reference\/ottl-language-guide\/edx-custom-functions\/edx-delete-empty-values.md":"edx-delete-empty-values","reference\/ottl-language-guide\/edx-custom-functions\/edx-delete-keys.md":"edx-delete-keys","reference\/ottl-language-guide\/edx-custom-functions\/edx-delete-matching-keys.md":"edx-delete-matching-keys","reference\/ottl-language-guide\/edx-custom-functions\/edx-keep-keys.md":"edx-keep-keys","reference\/ottl-language-guide\/edx-custom-functions\/edx-keep-matching-keys.md":"edx-keep-matching-keys","reference\/ottl-language-guide\/edx-custom-functions\/edx-map-keys.md":"edx-map-keys","reference\/ottl-language-guide\/edx-custom-functions\/edx_redis.md":"ottl-edxredis","reference\/ottl-language-guide\/edx-custom-functions\/edxcoalesce.md":"edx-coalesce","reference\/ottl-language-guide\/edx-custom-functions\/edxcode\/_index.md":"edx-code","reference\/ottl-language-guide\/edx-custom-functions\/edxcode\/basic-operations.md":"edx-code-basic-operations","reference\/ottl-language-guide\/edx-custom-functions\/edxcode\/complex-transformations.md":"edx-code-complex-transformations","reference\/ottl-language-guide\/edx-custom-functions\/edxcode\/examples.md":"edx-code-examples","reference\/ottl-language-guide\/edx-custom-functions\/edxcode\/performance-limitations.md":"edx-code-performance-limitations","reference\/ottl-language-guide\/edx-custom-functions\/edxcode\/sandbox.md":"edx-code-sandbox","reference\/ottl-language-guide\/edx-custom-functions\/edxcompress.md":"edx-compress","reference\/ottl-language-guide\/edx-custom-functions\/edxdatatype.md":"edx-datatype","reference\/ottl-language-guide\/edx-custom-functions\/edxdecode.md":"edx-decode","reference\/ottl-language-guide\/edx-custom-functions\/edxdecompress.md":"edx-decompress","reference\/ottl-language-guide\/edx-custom-functions\/edxencode.md":"edx-encode","reference\/ottl-language-guide\/edx-custom-functions\/edxencrypt-decrypt.md":"edx-encrypt-decrypt","reference\/ottl-language-guide\/edx-custom-functions\/edxenv.md":"edx-env","reference\/ottl-language-guide\/edx-custom-functions\/edxextractpatterns.md":"edx-extractpatterns","reference\/ottl-language-guide\/edx-custom-functions\/edxhmac.md":"edx-hmac","reference\/ottl-language-guide\/edx-custom-functions\/edxifelse.md":"edx-ifelse","reference\/ottl-language-guide\/edx-custom-functions\/edxlookup.md":"edx-lookup","reference\/ottl-language-guide\/edx-custom-functions\/edxparsekeyvalue.md":"edx-parsekeyvalue","reference\/ottl-language-guide\/edx-custom-functions\/edxunescapejson.md":"edx-unescapejson","reference\/ottl-language-guide\/ottl-converter-functions\/01-ottl-converter-functions-overview.md":"ottl-converter-overview","reference\/ottl-language-guide\/ottl-converter-functions\/_index.md":"ottl-converter","reference\/ottl-language-guide\/ottl-converter-functions\/bool.md":"converter-bool","reference\/ottl-language-guide\/ottl-converter-functions\/communityid.md":"converter-communityid","reference\/ottl-language-guide\/ottl-converter-functions\/concat.md":"converter-concat","reference\/ottl-language-guide\/ottl-converter-functions\/containsvalue.md":"converter-containsvalue","reference\/ottl-language-guide\/ottl-converter-functions\/convertattributestoelementsxml.md":"converter-convertattributestoelementsxml","reference\/ottl-language-guide\/ottl-converter-functions\/convertcase.md":"converter-case-conversion","reference\/ottl-language-guide\/ottl-converter-functions\/converttexttoelementsxml.md":"converter-converttexttoelementsxml","reference\/ottl-language-guide\/ottl-converter-functions\/decode.md":"converter-decode","reference\/ottl-language-guide\/ottl-converter-functions\/double.md":"converter-double","reference\/ottl-language-guide\/ottl-converter-functions\/duration.md":"converter-duration","reference\/ottl-language-guide\/ottl-converter-functions\/extractgrokpatterns.md":"converter-extractgrokpatterns","reference\/ottl-language-guide\/ottl-converter-functions\/extractpatterns.md":"converter-extractpatterns","reference\/ottl-language-guide\/ottl-converter-functions\/fnv.md":"converter-fnv","reference\/ottl-language-guide\/ottl-converter-functions\/format.md":"converter-format","reference\/ottl-language-guide\/ottl-converter-functions\/getxml.md":"converter-getxml","reference\/ottl-language-guide\/ottl-converter-functions\/hasprefix.md":"converter-hasprefix","reference\/ottl-language-guide\/ottl-converter-functions\/hassuffix.md":"converter-hassuffix","reference\/ottl-language-guide\/ottl-converter-functions\/hex.md":"converter-hex","reference\/ottl-language-guide\/ottl-converter-functions\/index-function.md":"converter-index","reference\/ottl-language-guide\/ottl-converter-functions\/insertxml.md":"converter-insertxml","reference\/ottl-language-guide\/ottl-converter-functions\/int.md":"converter-int","reference\/ottl-language-guide\/ottl-converter-functions\/isincidr.md":"converter-isincidr","reference\/ottl-language-guide\/ottl-converter-functions\/ismatch.md":"converter-ismatch","reference\/ottl-language-guide\/ottl-converter-functions\/isrootspan.md":"converter-isrootspan","reference\/ottl-language-guide\/ottl-converter-functions\/isvalidluhn.md":"converter-isvalidluhn","reference\/ottl-language-guide\/ottl-converter-functions\/keys.md":"converter-keys","reference\/ottl-language-guide\/ottl-converter-functions\/len.md":"converter-len","reference\/ottl-language-guide\/ottl-converter-functions\/log.md":"converter-log","reference\/ottl-language-guide\/ottl-converter-functions\/md5.md":"converter-md5","reference\/ottl-language-guide\/ottl-converter-functions\/murmur3.md":"converter-murmur3","reference\/ottl-language-guide\/ottl-converter-functions\/now.md":"converter-now","reference\/ottl-language-guide\/ottl-converter-functions\/parsecsv.md":"converter-parsecsv","reference\/ottl-language-guide\/ottl-converter-functions\/parseint.md":"converter-parseint","reference\/ottl-language-guide\/ottl-converter-functions\/parsejson.md":"converter-parsejson","reference\/ottl-language-guide\/ottl-converter-functions\/parsekeyvalue.md":"converter-parsekeyvalue","reference\/ottl-language-guide\/ottl-converter-functions\/parseseverity.md":"converter-parseseverity","reference\/ottl-language-guide\/ottl-converter-functions\/parsesimplifiedxml.md":"converter-parsesimplifiedxml","reference\/ottl-language-guide\/ottl-converter-functions\/parsexml.md":"converter-parsexml","reference\/ottl-language-guide\/ottl-converter-functions\/removexml.md":"converter-removexml","reference\/ottl-language-guide\/ottl-converter-functions\/sha.md":"converter-sha","reference\/ottl-language-guide\/ottl-converter-functions\/sort.md":"converter-sort","reference\/ottl-language-guide\/ottl-converter-functions\/split.md":"converter-split","reference\/ottl-language-guide\/ottl-converter-functions\/string.md":"converter-string","reference\/ottl-language-guide\/ottl-converter-functions\/substring.md":"converter-substring","reference\/ottl-language-guide\/ottl-converter-functions\/time-components.md":"converter-time-components","reference\/ottl-language-guide\/ottl-converter-functions\/time.md":"converter-time","reference\/ottl-language-guide\/ottl-converter-functions\/tokeyvaluestring.md":"converter-tokeyvaluestring","reference\/ottl-language-guide\/ottl-converter-functions\/trim.md":"converter-trim","reference\/ottl-language-guide\/ottl-converter-functions\/trimprefix.md":"converter-trimprefix","reference\/ottl-language-guide\/ottl-converter-functions\/trimsuffix.md":"converter-trimsuffix","reference\/ottl-language-guide\/ottl-converter-functions\/type-checking.md":"converter-type-checking","reference\/ottl-language-guide\/ottl-converter-functions\/url.md":"converter-url","reference\/ottl-language-guide\/ottl-converter-functions\/useragent.md":"converter-useragent","reference\/ottl-language-guide\/ottl-converter-functions\/uuid.md":"converter-uuid","reference\/ottl-language-guide\/ottl-converter-functions\/uuidv7.md":"converter-uuidv7","reference\/ottl-language-guide\/ottl-converter-functions\/values.md":"converter-values","reference\/ottl-language-guide\/ottl-converter-functions\/xxh128.md":"converter-xxh128","reference\/ottl-language-guide\/ottl-converter-functions\/xxh3.md":"converter-xxh3","reference\/ottl-language-guide\/ottl-cookbook.md":"ottl-cookbook","reference\/ottl-language-guide\/ottl-editor-functions\/01-ottl-editor-functions-overview.md":"ottl-editors-overview","reference\/ottl-language-guide\/ottl-editor-functions\/_index.md":"ottl-editors","reference\/ottl-language-guide\/ottl-editor-functions\/append.md":"editor-append","reference\/ottl-language-guide\/ottl-editor-functions\/delete-index.md":"editor-delete_index","reference\/ottl-language-guide\/ottl-editor-functions\/delete-key.md":"editor-delete_key","reference\/ottl-language-guide\/ottl-editor-functions\/delete-matching-keys.md":"editor-delete_matching_keys","reference\/ottl-language-guide\/ottl-editor-functions\/flatten.md":"editor-flatten","reference\/ottl-language-guide\/ottl-editor-functions\/keep-keys.md":"editor-keep_keys","reference\/ottl-language-guide\/ottl-editor-functions\/keep-matching-keys.md":"editor-keep_matching_keys","reference\/ottl-language-guide\/ottl-editor-functions\/limit.md":"editor-limit","reference\/ottl-language-guide\/ottl-editor-functions\/merge-maps.md":"editor-merge_maps","reference\/ottl-language-guide\/ottl-editor-functions\/replace-all-matches.md":"editor-replace_all_matches","reference\/ottl-language-guide\/ottl-editor-functions\/replace-all-patterns.md":"editor-replace_all_patterns","reference\/ottl-language-guide\/ottl-editor-functions\/replace-match.md":"editor-replace_match","reference\/ottl-language-guide\/ottl-editor-functions\/replace-pattern.md":"editor-replace_pattern","reference\/ottl-language-guide\/ottl-editor-functions\/set.md":"editor-set","reference\/ottl-language-guide\/ottl-editor-functions\/truncate-all.md":"editor-truncate_all","reference\/ottl-language-guide\/ottl-quick-reference.md":"ottl-cheat-sheet","reference\/ottl-language-guide\/time-conversion-guide.md":"ottl-time-conversion","reference\/release-notes\/_index.md":"release-notes","reference\/release-notes\/v0.1.100.md":"v0.1.100-release-notes\/","reference\/release-notes\/v0.1.101.md":"v0.1.101-release-notes\/","reference\/release-notes\/v0.1.102.md":"v0.1.102-release-notes\/","reference\/release-notes\/v0.1.104.md":"v0.1.104-release-notes\/","reference\/release-notes\/v0.1.105.md":"v0.1.105-release-notes\/","reference\/release-notes\/v0.1.16.md":"v0.1.16-release-notes\/","reference\/release-notes\/v0.1.18.md":"v0.1.18-release-notes\/","reference\/release-notes\/v0.1.19.md":"v0.1.19-release-notes\/","reference\/release-notes\/v0.1.20.md":"v0.1.20-release-notes\/","reference\/release-notes\/v0.1.21.md":"v0.1.21-release-notes\/","reference\/release-notes\/v0.1.22.md":"v0.1.22-release-notes\/","reference\/release-notes\/v0.1.23.md":"v0.1.23-release-notes\/","reference\/release-notes\/v0.1.24.md":"v0.1.24-release-notes\/","reference\/release-notes\/v0.1.25.md":"v0.1.25-release-notes\/","reference\/release-notes\/v0.1.39.md":"v0.1.39-release-notes\/","reference\/release-notes\/v0.1.40.md":"v0.1.40-release-notes\/","reference\/release-notes\/v0.1.41.md":"v0.1.41-release-notes\/","reference\/release-notes\/v0.1.42.md":"v0.1.42-release-notes\/","reference\/release-notes\/v0.1.43.md":"v0.1.43-release-notes\/","reference\/release-notes\/v0.1.44.md":"v0.1.44-release-notes\/","reference\/release-notes\/v0.1.45.md":"v0.1.45-release-notes\/","reference\/release-notes\/v0.1.46.md":"v0.1.46-release-notes\/","reference\/release-notes\/v0.1.47.md":"v0.1.47-release-notes\/","reference\/release-notes\/v0.1.48.md":"v0.1.48-release-notes\/","reference\/release-notes\/v0.1.49.md":"v0.1.49-release-notes\/","reference\/release-notes\/v0.1.50.md":"v0.1.50-release-notes\/","reference\/release-notes\/v0.1.51.md":"v0.1.51-release-notes\/","reference\/release-notes\/v0.1.52.md":"v0.1.52-release-notes\/","reference\/release-notes\/v0.1.53.md":"v0.1.53-release-notes\/","reference\/release-notes\/v0.1.54.md":"v0.1.54-release-notes\/","reference\/release-notes\/v0.1.55.md":"v0.1.55-release-notes\/","reference\/release-notes\/v0.1.56.md":"v0.1.56-release-notes\/","reference\/release-notes\/v0.1.57.md":"v0.1.57-release-notes\/","reference\/release-notes\/v0.1.58.md":"v0.1.58-release-notes\/","reference\/release-notes\/v0.1.59.md":"v0.1.59-release-notes\/","reference\/release-notes\/v0.1.60.md":"v0.1.60-release-notes\/","reference\/release-notes\/v0.1.61.md":"v0.1.61-release-notes\/","reference\/release-notes\/v0.1.62.md":"v0.1.62-release-notes\/","reference\/release-notes\/v0.1.63.md":"v0.1.63-release-notes\/","reference\/release-notes\/v0.1.64.md":"v0.1.64-release-notes\/","reference\/release-notes\/v0.1.65.md":"v0.1.65-release-notes\/","reference\/release-notes\/v0.1.66.md":"v0.1.66-release-notes\/","reference\/release-notes\/v0.1.67.md":"v0.1.67-release-notes\/","reference\/release-notes\/v0.1.68.md":"v0.1.68-release-notes\/","reference\/release-notes\/v0.1.69.md":"v0.1.69-release-notes\/","reference\/release-notes\/v0.1.70.md":"v0.1.70-release-notes\/","reference\/release-notes\/v0.1.71.md":"v0.1.71-release-notes\/","reference\/release-notes\/v0.1.72.md":"v0.1.72-release-notes\/","reference\/release-notes\/v0.1.73.md":"v0.1.73-release-notes\/","reference\/release-notes\/v0.1.74.md":"v0.1.74-release-notes\/","reference\/release-notes\/v0.1.75.md":"v0.1.75-release-notes\/","reference\/release-notes\/v0.1.76.md":"v0.1.76-release-notes\/","reference\/release-notes\/v0.1.77.md":"v0.1.77-release-notes\/","reference\/release-notes\/v0.1.78.md":"v0.1.78-release-notes\/","reference\/release-notes\/v0.1.79.md":"v0.1.79-release-notes\/","reference\/release-notes\/v0.1.80.md":"v0.1.80-release-notes\/","reference\/release-notes\/v0.1.81.md":"v0.1.81-release-notes\/","reference\/release-notes\/v0.1.82.md":"v0.1.82-release-notes\/","reference\/release-notes\/v0.1.83.md":"v0.1.83-release-notes\/","reference\/release-notes\/v0.1.84.md":"v0.1.84-release-notes\/","reference\/release-notes\/v0.1.85.md":"v0.1.85-release-notes\/","reference\/release-notes\/v0.1.86.md":"v0.1.86-release-notes\/","reference\/release-notes\/v0.1.87.md":"v0.1.87-release-notes\/","reference\/release-notes\/v0.1.88.md":"v0.1.88-release-notes\/","reference\/release-notes\/v0.1.89.md":"v0.1.89-release-notes\/","reference\/release-notes\/v0.1.90.md":"v0.1.90-release-notes\/","reference\/release-notes\/v0.1.91.md":"v0.1.91-release-notes\/","reference\/release-notes\/v0.1.92.md":"v0.1.92-release-notes\/","reference\/release-notes\/v0.1.93.md":"v0.1.93-release-notes\/","reference\/release-notes\/v0.1.94.md":"v0.1.94-release-notes\/","reference\/release-notes\/v0.1.95.md":"v0.1.95-release-notes\/","reference\/release-notes\/v0.1.96.md":"v0.1.96-release-notes\/","reference\/release-notes\/v0.1.97.md":"v0.1.97-release-notes\/","reference\/release-notes\/v0.1.98.md":"v0.1.98-release-notes\/","reference\/release-notes\/v0.1.99.md":"v0.1.99-release-notes\/","reference\/release-notes\/v1.10.0.md":"v1.10.0-release-notes\/","reference\/release-notes\/v1.11.0.md":"v1.11.0-release-notes\/","reference\/release-notes\/v1.12.0.md":"v1.12.0-release-notes\/","reference\/release-notes\/v1.13.0.md":"v1.13.0-release-notes\/","reference\/release-notes\/v1.14.0.md":"v1.14.0-release-notes\/","reference\/release-notes\/v1.15.0.md":"v1.15.0-release-notes\/","reference\/release-notes\/v1.16.0.md":"v1.16.0-release-notes\/","reference\/release-notes\/v1.17.0.md":"v1.17.0-release-notes\/","reference\/release-notes\/v1.18.0.md":"v1.18.0-release-notes\/","reference\/release-notes\/v1.19.0.md":"v1.19.0-release-notes\/","reference\/release-notes\/v1.20.0.md":"v1.20.0-release-notes\/","reference\/release-notes\/v1.21.0.md":"v1.21.0-release-notes\/","reference\/release-notes\/v1.22.0.md":"v1.22.0-release-notes\/","reference\/release-notes\/v1.23.0.md":"v1.23.0-release-notes\/","reference\/release-notes\/v1.24.0.md":"v1.24.0-release-notes\/","reference\/release-notes\/v1.25.0.md":"v1.25.0-release-notes\/","reference\/release-notes\/v1.26.0.md":"v1.26.0-release-notes\/","reference\/release-notes\/v1.27.0.md":"v1.27.0-release-notes\/","reference\/release-notes\/v1.28.0.md":"v1.28.0-release-notes\/","reference\/release-notes\/v1.29.0.md":"v1.29.0-release-notes\/","reference\/release-notes\/v1.30.0.md":"v1.30.0-release-notes\/","reference\/release-notes\/v1.31.0.md":"v1.31.0-release-notes\/","reference\/release-notes\/v1.32.0.md":"v1.32.0-release-notes\/","reference\/release-notes\/v1.33.0.md":"v1.33.0-release-notes\/","reference\/release-notes\/v1.34.0.md":"v1.34.0-release-notes\/","reference\/release-notes\/v1.35.0.md":"v1.35.0-release-notes\/","reference\/release-notes\/v1.36.0.md":"v1.36.0-release-notes\/","reference\/release-notes\/v1.37.0.md":"v1.37.0-release-notes\/","reference\/release-notes\/v1.38.0.md":"v1.38.0-release-notes\/","reference\/release-notes\/v1.39.0.md":"v1.39.0-release-notes\/","reference\/release-notes\/v2.0.0.md":"v2.0.0-release-notes\/","reference\/release-notes\/v2.1.0.md":"v2.1.0-release-notes\/","reference\/release-notes\/v2.10.0.md":"v2.10.0-release-notes\/","reference\/release-notes\/v2.11.0.md":"v2.11.0-release-notes\/","reference\/release-notes\/v2.12.0.md":"v2.12.0-release-notes\/","reference\/release-notes\/v2.13.0.md":"v2.13.0-release-notes\/","reference\/release-notes\/v2.14.0.md":"v2.14.0-release-notes\/","reference\/release-notes\/v2.2.0.md":"v2.2.0-release-notes\/","reference\/release-notes\/v2.3.0.md":"v2.3.0-release-notes\/","reference\/release-notes\/v2.4.0.md":"v2.4.0-release-notes\/","reference\/release-notes\/v2.5.0.md":"v2.5.0-release-notes\/","reference\/release-notes\/v2.6.0.md":"v2.6.0-release-notes\/","reference\/release-notes\/v2.7.0.md":"v2.7.0-release-notes\/","reference\/release-notes\/v2.8.0.md":"v2.8.0-release-notes\/","reference\/release-notes\/v2.9.0.md":"v2.9.0-release-notes\/","reference\/rest-api-reference\/_index.md":"api","reference\/rest-api-reference\/api-example.md":"api-example","reference\/rest-api-reference\/create-api-token.md":"create-api-token","reference\/rest-api-reference\/get-org-id.md":"get-org-id","reference\/rest-api-reference\/query-metrics-api.md":"query-metrics-api","reference\/support\/_index.md":"contact-support","sources\/_index.md":"sources-parent","sources\/cloud-native-sources\/_index.md":"cloud-native-sources","sources\/cloud-native-sources\/pubsub_input.md":"pubsub_input_node","sources\/cloud-native-sources\/s3-input\/_index.md":"s3_input_node","sources\/cloud-native-sources\/s3-input\/ingest-from-s3.md":"s3_input_node-preparation","sources\/custom-sources\/_index.md":"custom-sources","sources\/custom-sources\/http-pull\/_index.md":"http-pull-input-node","sources\/custom-sources\/http-pull\/azure-ad-audit-logs.md":"azure-ad-audit-logs-microsoft-graph","sources\/custom-sources\/http-pull\/azure-ad-signin-logs.md":"azure-ad-signin-logs-microsoft-graph","sources\/custom-sources\/http-pull\/custom-apis.md":"http-pull-custom-apis","sources\/custom-sources\/http-pull\/duo.md":"http-pull-duo-admin-api","sources\/custom-sources\/http-pull\/exchange-audit-logs.md":"exchange-audit-logs-office-365","sources\/custom-sources\/http-pull\/github.md":"http-pull-github-api","sources\/custom-sources\/http-pull\/manage-office.md":"http-pull-office-365-management-api","sources\/custom-sources\/http-pull\/microsoft-graph.md":"http-pull-microsoft-graph-api","sources\/custom-sources\/http-pull\/microsoft-security-alerts.md":"microsoft-security-alerts-graph-api","sources\/custom-sources\/http-pull\/netskope.md":"http-pull-netskope","sources\/custom-sources\/http-pull\/sharepoint-audit-logs.md":"sharepoint-audit-logs-office-365","sources\/custom-sources\/http-pull\/teams-audit-logs.md":"teams-audit-logs-office-365","sources\/custom-sources\/http-workflow\/_index.md":"http-workflow-input-node","sources\/custom-sources\/snmp_input.md":"snmp-pull-input-node","sources\/custom-sources\/snmp_trap_input.md":"snmp-trap-input-node","sources\/custom-sources\/syslog-input\/_index.md":"syslog-input-node","sources\/custom-sources\/syslog-input\/configuration-reference.md":"syslog-input-configuration-reference","sources\/custom-sources\/syslog-input\/device-integration.md":"syslog-input-device-integration","sources\/custom-sources\/syslog-input\/performance-tuning.md":"syslog-input-performance-tuning","sources\/custom-sources\/syslog-input\/troubleshooting.md":"syslog-input-troubleshooting","sources\/diagnostic-sources\/_index.md":"diagnostic-sources","sources\/diagnostic-sources\/ed_component_health_input.md":"agent-component-health-node","sources\/diagnostic-sources\/ed_container_stats_input.md":"container-statistics-node","sources\/diagnostic-sources\/ed_health_output.md":"ed-health-output-node","sources\/diagnostic-sources\/ed_self_telemetry_input.md":"ed_self_telemetry_input-node","sources\/diagnostic-sources\/ed_system_stats_input.md":"system-statistics-node","sources\/hybrid-sources\/HTTP_input.md":"http-input-node","sources\/hybrid-sources\/TCP_input.md":"tcp-input-node","sources\/hybrid-sources\/TelemetryGen_source.md":"telemetrygen-node","sources\/hybrid-sources\/UDP_input.md":"udp-input-node","sources\/hybrid-sources\/_index.md":"hybrid-sources","sources\/hybrid-sources\/datadog_source.md":"datadog-input-node","sources\/hybrid-sources\/ed-pipeline-source.md":"pipeline-source-node","sources\/hybrid-sources\/otlp-input\/Ingest-from-OTLP.md":"otlp-input-node-preparation","sources\/hybrid-sources\/otlp-input\/_index.md":"otlp-input-node","sources\/log-sources\/_index.md":"log-sources","sources\/log-sources\/croudstrike-fdr.md":"crowdstrike-fdr-source-node","sources\/log-sources\/docker_input.md":"docker-input-node","sources\/log-sources\/eventhub-input\/_index.md":"event-hub-source-node","sources\/log-sources\/eventhub-input\/azure-setup.md":"event-hub-source-node-azure-streaming-setup","sources\/log-sources\/exec_input.md":"exec-input-node","sources\/log-sources\/file-input\/_index.md":"file-input-node","sources\/log-sources\/file-input\/file-input.md":"ingest-logs-from-file-i5m","sources\/log-sources\/filebeat-input\/_index.md":"filebeat-source","sources\/log-sources\/filebeat-input\/ingest-from-elasticsearch-api.md":"ingest-from-elasticsearch-api","sources\/log-sources\/fluentd\/_index.md":"fluentd-input-node","sources\/log-sources\/fluentd\/ingest-from-fluentd.md":"ingest-logs-from-fluentd","sources\/log-sources\/journal_d.md":"journald-source-node","sources\/log-sources\/k8s-event.md":"kubernetes-event-node","sources\/log-sources\/k8s-input\/_index.md":"kubernetes-node","sources\/log-sources\/k8s-input\/exclude_5_namespaces.md":"exclude-namespaces-i5m","sources\/log-sources\/kafka_input.md":"kafka-input-node","sources\/log-sources\/splunk-input\/_index.md":"splunk-sources","sources\/log-sources\/splunk-input\/ingest-from-splunk.md":"ingest-from-splunk","sources\/log-sources\/splunk-input\/splunk-hec.md":"splunk-hec-source-node","sources\/log-sources\/splunk-input\/splunk-tcp.md":"splunk-tcp-input-node","sources\/log-sources\/windows-event-input.md":"windows-event-source-node","sources\/metric-sources\/_index.md":"metric-sources","sources\/metric-sources\/k8s-metrics\/_index.md":"ingest-kubernetes-metrics","sources\/metric-sources\/k8s-metrics\/k8s-metrics.md":"kubernetes-metrics-input-node","sources\/metric-sources\/k8s-metrics\/k8s-servicemap.md":"kubernetes-traffic-input-node","sources\/metric-sources\/prometheus-input\/_index.md":"prometheus-input-node","sources\/metric-sources\/prometheus-input\/ingest-from-prometheus.md":"prometheus-input-node-preparation","sources\/select-metadata.md":"choose-data-item-metadata","sources\/source-detection.md":"source-detection","sources\/sources-overview.md":"sources","sources\/trace-sources\/_index.md":"trace-sources","sources\/trace-sources\/k8s-trace\/_index.md":"kubernetes-trace-source-node","sources\/trace-sources\/k8s-trace\/ebpf-vs-otel-tracing.md":"ebpf-vs-otel-tracing","troubleshooting-and-tuning\/_index.md":"troubleshooting-tuning-parent","troubleshooting-and-tuning\/data-handling\/_index.md":"troubleshoot-data-handling","troubleshooting-and-tuning\/data-handling\/buffer-configuration.md":"buffer-configuration","troubleshooting-and-tuning\/data-handling\/log-folder.md":"define-log-folder","troubleshooting-and-tuning\/data-handling\/persisting-cursor.md":"persisting-cursor","troubleshooting-and-tuning\/data-handling\/troubleshooting-datadog-tags.md":"troubleshoot-datadog-tags","troubleshooting-and-tuning\/data-handling\/troubleshooting-ingest-failures.md":"troubleshooting-ingest-failures","troubleshooting-and-tuning\/data-handling\/troubleshooting-traces.md":"troubleshoot-traces","troubleshooting-and-tuning\/data-handling\/work-with-time.md":"manage-log-timestamps","troubleshooting-and-tuning\/destinations\/_index.md":"troubleshoot-destinations","troubleshooting-and-tuning\/destinations\/apache-kudu-troubleshooting.md":"troubleshoot-apache-kudu","troubleshooting-and-tuning\/destinations\/bigquery-troubleshooting.md":"troubleshoot-bigquery","troubleshooting-and-tuning\/destinations\/in-cluster-destination.md":"in-cluster-destinations","troubleshooting-and-tuning\/destinations\/otlp-destination-troubleshooting.md":"troubleshoot-otlp-destination","troubleshooting-and-tuning\/destinations\/splunk-troubleshooting.md":"troubleshoot-splunk","troubleshooting-and-tuning\/infrastructure\/_index.md":"troubleshoot-infrastructure","troubleshooting-and-tuning\/infrastructure\/secrets-troubleshooting.md":"secrets-troubleshooting","troubleshooting-and-tuning\/infrastructure\/specific-nodes.md":"install-specific-nodes","troubleshooting-and-tuning\/infrastructure\/uneven-deployments.md":"uneven-deployments","troubleshooting-and-tuning\/installation\/_index.md":"troubleshoot-installation","troubleshooting-and-tuning\/installation\/install-linux-troubleshooting.md":"troubleshoot-linux","troubleshooting-and-tuning\/installation\/troubleshoot-cloud-pipelines.md":"troubleshoot-cloud-pipelines","troubleshooting-and-tuning\/installation\/troubleshoot-docker.md":"troubleshoot-docker","troubleshooting-and-tuning\/installation\/troubleshoot-helm.md":"troubleshoot-helm","troubleshooting-and-tuning\/installation\/troubleshoot-kubectl.md":"troubleshoot-kubectl","troubleshooting-and-tuning\/overview-troubleshooting.md":"troubleshooting-tuning","troubleshooting-and-tuning\/performance-tuning\/_index.md":"performance-tuning","troubleshooting-and-tuning\/performance-tuning\/debug-components.md":"debug-components","troubleshooting-and-tuning\/performance-tuning\/design-efficiently.md":"efficient-pipeline-design","troubleshooting-and-tuning\/performance-tuning\/pprof-agents.md":"pprof-agents","troubleshooting-and-tuning\/performance-tuning\/processor-best-practices.md":"multiprocessor-best-practices","troubleshooting-and-tuning\/performance-tuning\/reduce-agent-resource-consumption.md":"reduce-agent-resource-consumption","troubleshooting-and-tuning\/processors\/_index.md":"troubleshoot-processors","troubleshooting-and-tuning\/processors\/edxcode-troubleshooting.md":"edx-code-troubleshooting","troubleshooting-and-tuning\/processors\/edxredis-troubleshooting.md":"edxredis-troubleshooting","troubleshooting-and-tuning\/processors\/regex-wrapping.md":"string-regex","troubleshooting-and-tuning\/processors\/troubleshooting-deotel.md":"troubleshooting-deotel","use-cases\/_index.md":"ai-team-use-cases","use-cases\/anomaly-investigation.md":"ai-team-anomaly-investigation","use-cases\/cicd-pipeline-failure.md":"ai-team-cicd-pipeline-failure","use-cases\/cross-platform-logs.md":"ai-team-cross-platform-logs","use-cases\/data-locality-investigation.md":"ai-team-data-locality-investigation","use-cases\/database-performance.md":"ai-team-database-performance","use-cases\/github-development-workflows.md":"ai-team-github-development-workflows","use-cases\/ingest-failure-investigation.md":"ai-team-ingest-failure-investigation","use-cases\/kafka-security-monitoring.md":"ai-team-kafka-security","use-cases\/kubernetes-troubleshooting.md":"ai-team-kubernetes-troubleshooting","use-cases\/pagerduty-incident-response.md":"ai-team-pagerduty-incident-response","use-cases\/security-degradation.md":"ai-team-security-degradation"}