Builder

One LOGS query-selector block: an exact log-store column mapped to the raw value it carries, so the selector matches the emitted signal. Keys are store column names, not bare attribute names. Every block carries "@logGroupName"; alongside it a block carries either the entity columns ("@entities.KeyAttributes.Name", ".Type", ".Environment", "@entities.Attributes.PlatformType") or OTel columns ("resource.attributes['service.name']", "resource.attributes['service.namespace']", "resource.attributes['cloud.provider'|'cloud.account.id'|'cloud.region']"). A dimension seen under several values — several log groups, or a service under two namespaces — becomes several blocks with the same columns and different values, to be OR'd together.