input.topic.0.name=winlogbeat-sysmon
input.topic.0.enabled=true
input.topic.0.rawdata.field=
input.topic.0.omit.rawdata=false
input.topic.0.extraction=json
input.topic.0.regex=
input.topic.0.timestamp.field=@timestamp
input.topic.0.timestamp.pattern=yyyy-MM-dd'T'HH\:mm\:ss.SSSZ
input.topic.0.host.name=
input.topic.0.host.field=host.name
input.topic.0.source.name=winlogbeat-sysmon
input.topic.0.source.field=winlog.channel
input.topic.0.datamodel.name=winlogbeat-sysmon
input.topic.0.datamodel.field=
input.topic.0.src.field=source.ip
input.topic.0.dest.field=destination.ip
input.topic.0.user.field=user.name

input.topic.1.name=winlogbeat-security
input.topic.1.enabled=true
input.topic.1.rawdata.field=
input.topic.1.omit.rawdata=false
input.topic.1.extraction=json
input.topic.1.regex=
input.topic.1.timestamp.field=@timestamp
input.topic.1.timestamp.pattern=yyyy-MM-dd'T'HH\:mm\:ss.SSSZ
input.topic.1.host.name=
input.topic.1.host.field=host.name
input.topic.1.source.name=winlogbeat-security
input.topic.1.source.field=winlog.channel
input.topic.1.datamodel.name=winlogbeat-security
input.topic.1.datamodel.field=
input.topic.1.src.field=source.ip
input.topic.1.dest.field=winlog.event_data.TargetServerName
input.topic.1.user.field=user.name
