filebeat.inputs:
  - type: filestream
    id: app-logs
    enabled: true
    paths:
      - /var/log/app/*.log
    processors:
      - add_fields:
          target: ''
          fields:
            ingest_source: app_logs