From 904ddeebfde762705563e08dae4b22fabe257751 Mon Sep 17 00:00:00 2001
From: Felix Barnsteiner <felixbarny@users.noreply.github.com>
Date: Wed, 30 Mar 2022 10:22:52 +0200
Subject: [PATCH 1/3] Use filestream input instead of deprecated log

---
 docs/tab-widgets/filebeat.asciidoc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/tab-widgets/filebeat.asciidoc b/docs/tab-widgets/filebeat.asciidoc
index a3658cb..506ce29 100644
--- a/docs/tab-widgets/filebeat.asciidoc
+++ b/docs/tab-widgets/filebeat.asciidoc
@@ -7,7 +7,7 @@
 .filebeat.yaml
 ----
 filebeat.inputs:
-- type: log
+- type: filestream
   paths: /path/to/logs.json
   json.keys_under_root: true
   json.overwrite_keys: true

From 590ffc0ea062c1686cf8c122e200579212fb0b41 Mon Sep 17 00:00:00 2001
From: Felix Barnsteiner <felix.barnsteiner@elastic.co>
Date: Wed, 30 Mar 2022 13:46:36 +0200
Subject: [PATCH 2/3] Add instructions for Filebeat < 7.16

---
 docs/tab-widgets/filebeat.asciidoc | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/docs/tab-widgets/filebeat.asciidoc b/docs/tab-widgets/filebeat.asciidoc
index 506ce29..9ae4937 100644
--- a/docs/tab-widgets/filebeat.asciidoc
+++ b/docs/tab-widgets/filebeat.asciidoc
@@ -3,11 +3,29 @@
 . Follow the {filebeat-ref}/filebeat-installation-configuration.html[Filebeat quick start]
 . Add the following configuration to your `filebeat.yaml` file.
 
+For Filebeat 7.16+
+
 [source,yaml]
 .filebeat.yaml
 ----
 filebeat.inputs:
 - type: filestream
+  paths: /path/to/logs.json
+  parsers:
+    - ndjson:
+        keys_under_root: true
+        overwrite_keys: true
+        add_error_key: true
+        expand_keys: true
+----
+
+For Filebeat < 7.16
+
+[source,yaml]
+.filebeat.yaml
+----
+filebeat.inputs:
+- type: log
   paths: /path/to/logs.json
   json.keys_under_root: true
   json.overwrite_keys: true

From 85d18d8c6d39e6a89aa1a47acccec2986e8ed57f Mon Sep 17 00:00:00 2001
From: Felix Barnsteiner <felix.barnsteiner@elastic.co>
Date: Wed, 30 Mar 2022 13:46:53 +0200
Subject: [PATCH 3/3] Add metadata processors

---
 docs/tab-widgets/filebeat.asciidoc | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/docs/tab-widgets/filebeat.asciidoc b/docs/tab-widgets/filebeat.asciidoc
index 9ae4937..66053c5 100644
--- a/docs/tab-widgets/filebeat.asciidoc
+++ b/docs/tab-widgets/filebeat.asciidoc
@@ -17,6 +17,12 @@ filebeat.inputs:
         overwrite_keys: true
         add_error_key: true
         expand_keys: true
+
+processors:
+  - add_host_metadata: ~
+  - add_cloud_metadata: ~
+  - add_docker_metadata: ~
+  - add_kubernetes_metadata: ~
 ----
 
 For Filebeat < 7.16
@@ -31,6 +37,12 @@ filebeat.inputs:
   json.overwrite_keys: true
   json.add_error_key: true
   json.expand_keys: true
+
+processors:
+- add_host_metadata: ~
+- add_cloud_metadata: ~
+- add_docker_metadata: ~
+- add_kubernetes_metadata: ~
 ----
 // end::logs[]