description: Entrypoint Pipeline for system/auth Filebeat module
processors:
  - pipeline:
      if: ctx?.input?.type == "journald"
      name: '{< IngestPipeline "journald" >}'

  - pipeline:
      if: ctx?.input?.type == "log"
      name: '{< IngestPipeline "files" >}'
