securityonion/salt/elasticsearch/templates/component/elastic-agent/logs-system.system@custom.json

{
  "template": {
    "settings": {}
  },
  "_meta": {
    "package": {
      "name": "elastic_agent"
    },
    "managed_by": "fleet",
    "managed": true
  }
}