journalbeat.inputs:
- paths:
  - "/var/log/journal"
  - "/var/log/journal/remote"
  seek: cursor

setup.template.settings:
  index.number_of_shards: 1

output.elasticsearch:
  hosts: ["https://oglog-os.mytld:9200"]
  username: "admin"
  password: "{{OPENSEARCH_INITIAL_ADMIN_PASSWORD}}"
  protocol: "https"
  ssl.enabled: true
  ssl.verification_mode: full
  ssl.certificate: "/etc/journalbeat/oglog-jb.mytld.crt.pem"
  ssl.key: "/etc/journalbeat/oglog-jb.mytld.key.pem"

processors:
  - add_docker_metadata: ~

seccomp.enabled: false