Configuration Steps Overview
Architecting a solution in Moogsoft Onprem is a somewhat "backward" design process. You first need to ingest data to start the assessment and build strategies, but the resulting Situation design further defines additional requirements for data ingestion.
Throughout the deployment process, you will return to the ingestion step multiple times. When you determine your clustering strategy and design Situations, you will identify additional needs to extract certain information from the source event payload.
For example, you may need to bundle alerts according to the floor where a server is located. If that information is available as part of the server name, you'll need to return to the ingestion step, and perform data parsing for the field.
Remember your solution design process is a cyclical, iterative one.