packages/symantec_endpoint/data_stream/log/agent/stream/tcp.yml.hbs

host: "{{listen_address}}:{{listen_port}}"
max_message_size: 1 MiB

tags:
{{#if preserve_original_event}}
  - preserve_original_event
{{/if}}
{{#each tags as |tag i|}}
  - {{tag}}
{{/each}}

{{#contains "forwarded" tags}}
publisher_pipeline.disable_host: true
{{/contains}}

fields_under_root: true
fields:
  _conf:
    tz_offset: '{{tz_offset}}'
    remove_mapped_fields: {{remove_mapped_fields}}

{{#if processors}}
processors:
{{processors}}
{{/if}}