Hello Team,
I hope you’re doing well.
We are planning to integrate IPAM data with Google SecOps by ingesting it as Entity Data into the Entity Context Graph (ECG) instead of traditional point-in-time log events. This approach is intended to enable better correlation of subnet/VLAN and IP data, helping us analyze traffic more effectively at the subnet level rather than individual IPs.
Please let us know if this approach aligns with best practices.
