Chronicle - February 24th, 2026 [Feature]

## Feature Feature **New: cross joins in multi-stage queries** You can now use cross joins in YARA-L 2.0 multi-stage queries let you compare individual UDM event data against aggregated statistics calculated in previous YARA-L stages. They are supported in: * Search * Dashboards For more information, see [Cross joins in multi-stage queries](https://docs.cloud.google.com/chronicle/docs/investigation/multi-stage-yaral#cross-joins). ## Feature Feature **RBAC for ingestion metrics** Administrators can now use RBAC for ingestion metrics to restrict visibility of system health data, such as ingestion volume, errors, and throughput, based on a user's business scope. The **Data Ingestion and Health** dashboard now uses Data Access scopes. When a scoped user loads the dashboard, the system automatically filters metrics to show only data that matches their assigned labels: Namespace, Log Type, and Ingestion Source. For more information, see [Ingestion metrics](https://cloud.google.com/chronicle/docs/reports/native-dashboards#ingestion%5Fmetrics).