file_log_path* | strings | | Specify a single path or multiple paths to read one or many files. You may also use a wildcard (*) to read multiple files within a directory. |
exclude_file_log_path | strings | "" | Specify a single path or multiple paths to exclude one or many files from being read. You may also use a wildcard (*) to exclude multiple files from being read within a directory. |
log_type | string | "cef" | Adds the specified 'Type' as a log record attribute to each log message. |
location | timezone | "UTC" | The geographic location (timezone) to use when parsing logs that contain a timestamp |
timezone | timezone | "UTC" | The timezone to use when parsing timestamps. |
start_at | enum | end | Start reading the file from the 'beginning' or 'end'. |