HETALOS / CASE NOTE 02
An empty production dashboard

An anonymized projection of historical founder-assisted compliance work.
Customer, service, revision and deployment identifiers and exact dates
are removed. No production change was performed by this investigation.

FIXED-WINDOW INGESTION READBACK
Window: the same fixed 24 hours for both disjoint label selectors.
Measurement: estimated indexed bytes, not log-entry counts.

Environment-labelled stream (development): 41,715,481 bytes
Stream without an environment label:      21,228,383 bytes

DEPLOYED COLLECTOR CONFIGURATION
Production was on the configuration from before label promotion.
Development included the label-promotion processor:
  loki.resource.labels =
    "deployment.environment,service.name,service.version"

FINDING
The production dashboard selector expected labels that the deployed
collector did not emit. The source observations supported a selector /
deployed-label mismatch rather than absence of log delivery.

NEXT STEP
Review a collector-specific revision and rollback target. Obtain
production-change authorization, deploy, then verify the resulting labels.
An application deployment does not update that separate collector.

This was a diagnosis, not evidence of remediation deployment, full logging
coverage, retention compliance or a completed audit.