問題文
Records from several sources have to end up in one place for correlation and long term keeping. Which approach fits the platform?
選択肢
- Rely on the search service to correlate across sources at query time, and keep each source in its own place, which one retention rule cannot cover.
- Write a scheduled function per source that reads and copies the records, and keep a separate schedule and a separate retry policy for each of them.
- Point every source at one log so that the entries are already together, because a single log can be the destination of any number of services and of the audit trail at the same time.
- Use connectors to move the records from each source to a common target, adding filter or function tasks where the volume has to be reduced.