Log ingestion via OneAgent