The use case here was a single machine. Of course cardinality becomes a problem on the long run - but for a couple of days worth of data it worked quite nicely.

The use case here was a single machine. Of course cardinality becomes a problem on the long run - but for a couple of days worth of data it worked quite nicely. On top of that, at least in my case, I don't resolve a huge amount of new FQDNs