I must say, that I am confident it is something simple, but am struggling to make the iis module work in filebeat.
After you enable the iis module and set a custom path, it is throwing an error that
filebeat\modules.d\iis.yml', error invalid config: yaml: line 11: found unknown escape character
Additionally, I cannot understand as a concept how the paths work. We have a path we can declare in filebeat.yml directly. If we use only the iis module - do we need to declare the same paths there? If we use a module and a custom log file we want to send to a different ingest pipeline (to parse a special multiline log) - is this possible? Only in filebeat there is a space.id and index template we can declare, but I did not find anything in documentation about it working with the iis module. Ingest pipelines is also something not clear - can they be explicitly declared somehow? Because the log type itself has a different schema, so I don't get how will it be processed by the same pipeline...