Hi, I already have ELK server with Fleet server and agent. Now my goal is to onboard VMware vSphere integration and start collecting logs and metrics from multiple sites. Once this is set-up, my aim is to create per-site log in to access only their data.
The question is : how would you approach this? Would you create per-site integration, or create just one integration for all the sites? If you'd choose the latter approach (1 integration to rule them all), how would you then limit the access to each site to only their data provided the data ends up in one datastream ?