Use Cases and Deployment Scope
I implemented this in different ways to support different use cases and each time it was simple and quick to get up and running. Also, being able to find information like who is talking to which domains, or which domains you see as malware, or C2 is just an easy search without requiring a lot of data searching.