I’ve been using this page to reference collector ID values in ingestion metrics.
https://docs.cloud.google.com/chronicle/docs/ingestion/ingestion-notifications-for-health-metrics
Recently, I’m seeing
bbbb1111-bbbb-1111-bbbb-1111bbbb1111
and
ffffffff-ffff-ffff-ffff-ffffffffffff
values returned for ingestion.collector_id -- are these documented anywhere?
Seeing UDM as the ingestion.metadata.log_type for these -- I assume one or the other of these corresponds with entity risk change UDM events which have recently been enabled, but not sure about the other.
https://docs.cloud.google.com/chronicle/docs/release-notes#October_28_2025
