Secure access service edge function with configured metric collection intelligence

A tangible, non-transitory, computer-readable medium having computer-executable instructions stored thereon that, when executed by a processor on a computer, cause the computer to perform a method comprising:

• receiving a registration request from a telemetry exporter that transmits telemetry data;
• generating a telemetry configuration file for the telemetry exporter, the telemetry configuration file defining a policy for transmission of telemetry data from the telemetry exporter and an authentication token for the telemetry exporter;
• sharing the policy with a security enforcer;
• and
• sending the telemetry configuration file to the telemetry exporter, wherein the telemetry exporter is caused to connect with the security enforcer using the authentication token, send the telemetry configuration file to the security enforcer, and transmit collected telemetry data to the security enforcer, and further wherein the security enforcer is caused to create, based on obtaining the telemetry configuration file and the policy, a dynamic publish-subscribe stream for publishing the collected telemetry data received from the telemetry exporter.

A method, comprising:

• receiving, at a device and from an operations controller, a policy for transmission of telemetry data from a telemetry exporter based on the telemetry exporter registering with the operations controller;
• connecting, by the device, with the telemetry exporter using an authentication token of the telemetry exporter provided to the telemetry exporter by the operations controller based on the telemetry exporter registering with the operations controller;
• receiving, at the device and from the telemetry exporter, a telemetry configuration file for the telemetry exporter, the telemetry configuration file containing the policy for transmission of telemetry data from the telemetry exporter;
• creating, by the device and based on receiving the telemetry configuration file and the policy, a dynamic publish-subscribe stream for publishing collected telemetry data received from the telemetry exporter;
• and
• publishing, from the device and on the dynamic publish-subscribe stream, collected telemetry data received from the telemetry exporter.