Hello,
Does the following Alloy configuration send reports with all IDs?
loki.write "local" {
endpoint {
url = "http://YOUR_LOKI_SERVER_IP:3100/loki/api/v1/push"
}
}
loki.relabel "windows_mapping" {
forward_to = [loki.write.local.receiver]
rule {
source_labels = ["computer"]
target_label = "agent_hostname"
}
}
loki.process "parse_eventlog" {
forward_to = [
loki.relabel.windows_mapping.receiver,
]
stage.json {
expressions = {
"source" = "source",
}
}
stage.labels {
values = {
"source" = "source",
}
}
}
loki.source.windowsevent "security" {
forward_to = [
loki.process.parse_eventlog.receiver,
]
eventlog_name = "Security"
}
Thank you.