module_version: 1.0

var:
  - name: paths
    default:
      - /var/log/bro/current/http.log
    os.linux:
      - /var/log/bro/current/http.log
    os.darwin:
      - /usr/local/var/logs/current/http.log
  - name: tags
    default: [zeek.http]
  - name: internal_networks
    default: [ private ]

ingest_pipeline: ingest/pipeline.yml
input: config/http.yml

requires.processors:
- name: geoip
  plugin: ingest-geoip
- name: user_agent
  plugin: ingest-user_agent
