filebeat.inputs:
  - type: journald
    id: journald-system
    seek: cursor
    include_matches: []
    # Примеры фильтрации:
    # unit: sshd.service
    # syslog_identifier: kernel

processors:
  - add_host_metadata: ~
  - add_cloud_metadata: ~

setup.ilm.enabled: false
setup.template.enabled: false
setup.dashboards.enabled: false

output.elasticsearch:
  hosts: ["https://<IP_OpenSearch>:9200"]
  username: "filebeat_ingest"
  password: "<STRONG_PASSWORD>"
  protocol: "https"
  ssl.verification_mode: none
  index: "filebeat-%{+yyyy.MM.dd}"