vector.toml

[sinks.my_sink_id]
  # General
  type = "console" # required
  inputs = ["my-source-or-transform-id"] # required
  target = "stdout" # optional, default

  # Encoding
  encoding.codec = "json" # required

[sources.in]
    
  include = ["C:\\Windows\\System32\\winevt\\Logs\\System.evtx"]
  type = "file" # required
  

[sinks.out]
  # General
  bucket = "vectorlogs"# required
  inputs = ["in"] # required
  assume_role = "arn:aws:iam::982020395256:role/Vectortest"
  region = "us-east-1" # required, required when endpoint = ""
  type = "aws_s3" # required
  compression  = "gzip"
  healthcheck = true

  # Encoding
  encoding.codec = "ndjson" # required

  # Naming
  key_prefix = "windows/date=%F/" # optional, default