filebeat:
  config:
  zeek_logs_enabled:
    - conn
    - dce_rpc
    - dhcp
    - dnp3
    - dns
    - dpd
    - files
    - ftp
    - http
    - intel
    - irc
    - kerberos
    - modbus
    - notice
    - ntlm
    - pe
    - radius
    - rfb
    - rdp
    - sip
    - smb_files
    - smb_mapping
    - smtp
    - snmp
    - ssh
    - ssl
    - tunnel
    - weird
    - mysql
    - socks
    - x509