##################### Filebeat Configuration Example #########################
# options. The filebeat.reference.yml file from the same directory contains all the
# supported options with more comments. You can use it as a reference.
#
# You can find the full configuration reference here:
# https://www.elastic.co/guide/en/beats/filebeat/index.html

# For more available modules and options, please see the filebeat.reference.yml sample
# configuration file.

#=========================== Filebeat inputs =============================
logging.level: info
filebeat.inputs:
- type: filestream
  id: my-filestream-id
  enabled: true
  paths:
    - /home/azalles/repos/scratch/ecs/ecs*.log
  parsers:
    - ndjson:
        target: ""
        message_key: message
        overwrite_keys: true
        expand_keys: true
    - multiline:
        type: while_pattern
        pattern: '^{'
        negate: true
        #match: after
        #timeout: 5s
        #max_lines: 500

processors:
  - add_host_metadata:  
  
output.logstash:
  hosts: [url.com:5045]
  ssl.enabled: true
  ttl: 300
  ssl.certificate_authorities: ["/etc/filebeat/ca1.cer","/etc/filebeat/ca2.cer"]


#Custom Tags added during agent installation
tags: ['"ecs-testing"']