filebeat.inputs: - type: filestream enabled: true paths: - c:\Windows\System32\dns\DNS.log processors: - add_fields: fields: vendor: "microsoft" product: "dns" supportedModules: - xsiam