module_version: "1.0"

var:
  - name: paths
  - name: tags
    default: ["cylance.protect", "forwarded"]
  - name: syslog_host
    default: localhost
  - name: syslog_port
    default: 9529
  - name: input
    default: udp
  - name: community_id
    default: true
  - name: tz_offset
    default: local
  - name: rsa_fields
    default: true
  - name: keep_raw_fields
    default: false
  - name: debug
    default: false

ingest_pipeline: ingest/pipeline.yml
input: config/input.yml

requires.processors:
- name: geoip
  plugin: ingest-geoip
- name: user_agent
  plugin: ingest-user_agent
