filebeat.inputs:
  - type: log
    enabled: true
    paths:
      - /var/log/*.log
      - /home/user/logs/special/*.log

    # Include lines that match the regular expression
    include_lines: ['^ERR', '^WARN']
    # Exclude lines that match the regular expression
    exclude_lines: ['^DEBUG']
    # Exclude files which names match the regular expression
    exclude_files: ['.gz$']
    # Optional additional fields. These fields can be freely picked
    # to add additional information to the crawled log files for filtering
    # fields:
    #   level: debug
    #   review: 1