filebeat.inputs:
  - type: filestream
    id: signalscope-windows-synthetic
    enabled: true
    paths: ["/absolute/path/to/SignalScope/logs/windows-synthetic.jsonl"]
    parsers:
      - ndjson:
          target: ""
          add_error_key: true
    fields_under_root: true
    fields:
      log_source: windows_synthetic
      stream_hint: Windows

output.logstash:
  hosts: ["192.168.1.25:5044"]