{
  "policy_id": "endpoints-initial",
  "package": {
    "name": "system",
    "version": ""
  },
  "name": "system-endpoints",
  "namespace": "default",
  "inputs": {
    "system-logfile": {
      "enabled": true,
      "streams": {
        "system.auth": {
          "enabled": true,
          "vars": {
            "paths": [
              "/var/log/auth.log*",
              "/var/log/secure*"
            ]
          }
        },
        "system.syslog": {
          "enabled": true,
          "vars": {
            "paths": [
              "/var/log/messages*",
              "/var/log/syslog*"
            ]
          }
        }
      }
    },
    "system-winlog": {
      "enabled": true,
      "vars": {
        "preserve_original_event": false
      },
      "streams": {
        "system.application": {
          "enabled": true,
          "vars": {
            "tags": []
          }
        },
        "system.security": {
          "enabled": true,
          "vars": {
            "tags": []
          }
        }
        }
      },
      "system-system/metrics": {
        "enabled": false
    }
  }
}