Merge pull request #954 from Security-Onion-Solutions/issue/825

add pillar example for filebeat inputs/output

salt/filebeat/pillar.example

@@ -0,0 +1,22 @@
+filebeat:
+  config:
+    inputs:
+      - type: log
+        paths:
+          - /nsm/mylogdir/mylog.log
+        fields:
+          module: mymodule
+          dataset: mydataset
+          category: mycategory
+
+        processors:
+          - drop_fields:
+              fields: '["source", "prospector", "input", "offset", "beat"]'
+
+        fields_under_root: true
+        clean_removed: false
+        close_removed: false
+    output:
+      file:
+        path: "/tmp/filebeat"
+        filename: filebeat