Is it feasible to enrich events with say, DNS CAA record details as it flows through stream?

As if it needs help with making shit up

Hey Leif, I captured this in a feature request, the Integ team will be tracking using Cribl-17915

thanks

I moved it to linux and got 1 or two CAA records enriched on my events, of course the event im using to test gets no dns enrichment heh