@adonio thank you for your response. I am looking into this, and it does look like it might be at least part of the solution. Just so I'm clear, if one were to modify the local.meta file for a role associated with (in our case) the Add-on for GCP, would those logs only be available in the Search & Reporting (i.e. default search) app for users with that role? We will have multiple workloads (managed by distinct teams and with varying levels of confidentiality), and the logs generated by these workloads must be isolated to the development teams. ... View more

It seems there are multiple ways to do this (e.g. index filters or search filters tied to a role). As far as best practices, I think a major question is how these filters might affect performance. E.g. if we have, say, over 1k roles, and each role has a unique search filter all with access to the same index, will we start hitting significant performance slowdowns? I've seen assertions that "search filters" have performance implications, but I haven't been able to find any specific dimensions that would impact the performance (e.g. # of filters, cardinality of filtered index, etc). ... View more