JSONL sink with a downstream shipper

When this applies

Compliance regime requires every event to reach durable storage. A direct webhook to a SIEM cannot guarantee that under SIEM downtime — a local file plus a shipper can.

Steps To Complete

1. Configure JSONLSink to a durable mount. The path must survive pod restarts: