modules.d/squid.yml:
# Module: squid
# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-squid.html
- module: squid
log:
enabled: true
# Set which input to use between udp (default), tcp or file.
# var.input: udp
var.input: file
# var.syslog_host: localhost
# var.syslog_port: 9520
# Set paths for the log files when file input is used.
var.paths: ["/var/log/squid/access.log"]
# Toggle output of non-ECS fields (default true).
# var.rsa_fields: true
# Set custom timezone offset.
# "local" (default) for system timezone.
# "+02:00" for GMT+02:00
# var.tz_offset: local