7.4.2 exclude_files not workinig

[alces (alces alces)]

Hello,
I'm running elk and beats at 7.4.2 and I'm having trouble with the "exclude_files" config:
Following are extractions of my filebeat.yml and my system.yml:

filebeat.yml:

filebeat.inputs:
- type: log
  enabled: false
  paths:
    #/var/log/messages*

---------------------------------
system.yml:

- module: system
  syslog:
    enabled: true
	exclude_files: ['.+\.bz2$']
    var.paths: ["/var/log/messages*"]

My goal is to use only the modules for providing the paths filebeat should process.
I've tried a couple of thing but I can't get this to work. As soon as I copy any logfile to /var/log/messages-narf.bz2 or similar the harvester starts and sends the logfiles to my elk stack.

[kvch (Noémi Ványi)]

Hi,

exclude_files is an input level option, not module level. Thus, you have to specifiy the option under the input namespace.

The correct config is the following:

- module: system
  syslog:
    enabled: true
    var.paths: ["/var/log/messages*"]
    input:
      exclude_files: ['.+\.bz2$']