Understanding Humio’s Data Sources
I just had a great question on our Slack channel today, and thought I’d write up a small blog on how to deal with ingest performance.
When data arrives in Humio, it comes associated with a number of tags. These are distinguished values
#tag=value, which are used to guide and optimize how data is stored and searched, and as such your use and management of tags impacts both ingest speed and query performance.
You can specify tags e.g. in your filebeat configuration, when you create an endpoint to receive data on, tags can be created based on the contents of the log line.