api:
  enabled: false
  address: 0.0.0.0:8686


sources:
  my_source_id:
    type: file
    include:
      - /var/log/*.log
      - /var/log/*.log.1
    read_from: end

transforms:
  only_message:
    type: remap
    inputs:
      - my_source_id
    source: |
      . = parse_json!(.message)

sinks:
  # debug_console:
  #   type: console
  #   inputs:
  #     - my_source_id
  #   encoding:
  #     codec: json
  my_sink_id:
    type: elasticsearch
    inputs:
      - only_message
    endpoints:
      - ${ELASTIC_HOSTS}
    auth:
      password: ${ELASTIC_PASSWORD}
      user: ${ELASTIC_USER}
      strategy: "basic"
    bulk:
      index: "application-%Y-%m-%d"
    tls:
      ca_file: "/certs/ca/ca.crt"