packages/checkpoint/data_stream/firewall/agent/stream/log.yml.hbs

paths:
{{#each paths as |path i|}}
  - {{path}}
{{/each}}
exclude_files: ['\.gz$']
tags:
{{#if preserve_original_event}}
  - preserve_original_event
{{/if}}
{{#each tags as |tag i|}}
  - {{tag}}
{{/each}}
{{#contains "forwarded" tags}}
publisher_pipeline.disable_host: true
{{/contains}}
allow_deprecated_use: true
{{#if tz_offset}}
fields_under_root: true
fields:
  _conf:
    tz_offset: "{{tz_offset}}"
{{/if}}
processors:
- add_locale: ~
{{#if processors}}
{{processors}}
{{/if}}
{{#if internal_zones.length}}
- add_fields:
    target: _temp_
    fields:
      internal_zones:
        {{#each internal_zones as |zone i|}}
        - {{zone}}
        {{/each}}
{{/if}}
{{#if external_zones.length}}
- add_fields:
    target: _temp_
    fields:
      external_zones:
        {{#each external_zones as |zone i|}}
        - {{zone}}
        {{/each}}
{{/if}}