Understanding Humio’s Data Sources
When data arrives in Humio, it comes associated with a number of tags. These are distinguished values
#tag=value, which are used to guide and optimize how data is stored and searched, and as such your use and management of tags impacts both ingest speed and query performance.
You can specify tags e.g. in your filebeat configuration, when you create an endpoint to receive data on, tags can be created based on the contents of the log line.