gistfile1.txt

filebeat:
  config:
    filebeat:
      # List of prospectors to fetch data.
      prospectors:
      # Each - is a prospector.
        -
          paths:
            - "/var/log/daemon.log"
        
        -
          paths:
            - "/var/log/auth.log"
          input_type: log

output.txt

filebeat:
  output:
    elasticsearch:
      hosts:
      - localhost:9200
  prospectors:
  - paths:
    - /var/log/daemon.log
  - input_type: log
    paths:
    - /var/log/auth.log

state.txt

filebeat-config:
  file.serialize:
    - name: {{ filebeat.configfile }}
    - mode: 644
    - user: root
    - group: root
    - dataset: {{ filebeat.config }}
    - formatter: "YAML"