module_version: "1.0"
var:
- name: paths
- name: tags
default: ["cyberarkpas.audit", "forwarded"]
- name: syslog_host
default: localhost
- name: syslog_port
default: 9301
- name: input
default: tcp
- name: ssl
- name: preserve_original_event
default: false
ingest_pipeline: ingest/pipeline.yml
input: config/input.yml
requires.processors:
- name: geoip
plugin: ingest-geoip