How to Setup Tenant IDs


I am looking to create a MSSP and wanted to know the best process for determining whos data is whos and how to see the volume of data ingested by each tenant.

Could someone please assist?

Many Thanks

You'd need to add that into the events as they are ingested, or to put each tenants data into their own index/ILM policy.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.