Chronicle Unstructured Sink - Templated Labels

[Matt-Smart]

Hey All,

I'm looking to add dynamic content to some of my ingestion labels in the GCP Chronicle Unstructured sink.

I believe, and from testing I've confirmed, that the key/value pairs of labels are currently string literals rather than templated strings, so I was wondering if there was a way I could create a map during a transform and then set the full value of the labels field in the sink to that map? Or would this require a PR to enable the values of the labels map support template.

Thanks in advance!