thisisimportant.net
Data enrichment at ingest-time, not search time, with Cribl
There is flexibility in combining data at search time, but there is complexity with that approach as well. Cribl shows that there is convenience in creating that context at index-time as well.