logstash:
  assigned_pipelines:
    roles:
      fleet:
        - so/0012_input_elastic_agent.conf     
        - so/9806_output_lumberjack_fleet.conf.jinja
      manager:
        - so/0011_input_endgame.conf
        - so/0012_input_elastic_agent.conf
        - so/0013_input_lumberjack_fleet.conf
        - so/9999_output_redis.conf.jinja        
      receiver:
        - so/0011_input_endgame.conf
        - so/0012_input_elastic_agent.conf
        - so/9999_output_redis.conf.jinja
      search:
        - so/0900_input_redis.conf.jinja
        - so/9805_output_elastic_agent.conf.jinja
        - so/9900_output_endgame.conf.jinja
  settings:
    lsheap: 500m
  config:
    http_x_host: 0.0.0.0
    path_x_logs: /var/log/logstash
    pipeline_x_workers: 1
    pipeline_x_batch_x_size: 125
    pipeline_x_ecs_compatibility: disabled
  dmz_nodes: {}