input-configurations

When to use

• building, modifying, or reviewing

  agent/stream/*.yml.hbs

  templates for non-CEL input types
• configuring request, response, pagination, cursor, or authentication blocks in HTTPJSON templates
• wiring up cloud storage inputs (AWS S3, GCS, Azure Blob, Azure EventHub)
• setting up network inputs (TCP, UDP, HTTP Endpoint, WebSocket)
• configuring file-based inputs (Filestream, Logfile, Journald, Winlog)

When not to use

• CEL program development (

  cel-programs

  ) -- CEL templates have their own structure, state model, and mito workflow
• ingest pipeline processor design (

  ingest-pipelines

  )
• field mappings and ECS compliance (

  ecs-field-mappings

  )

Mandatory first read

references/common-input-patterns.md

forwarded

publisher_pipeline.disable_host

Type routing table

agent/stream/

input:

httpjson.yml.hbs

references/httpjson-guide.md

aws-s3.yml.hbs

references/aws-s3-guide.md

aws-cloudwatch.yml.hbs

references/aws-cloudwatch-guide.md

azure-blob-storage.yml.hbs

references/azure-blob-guide.md

azure-eventhub.yml.hbs

references/azure-eventhub-guide.md

gcs.yml.hbs

references/gcs-guide.md

gcp-pubsub.yml.hbs

references/gcp-pubsub-guide.md

tcp.yml.hbs

references/tcp-guide.md

udp.yml.hbs

references/udp-guide.md

http_endpoint.yml.hbs

references/http-endpoint-guide.md

filestream.yml.hbs

references/filestream-guide.md

log.yml.hbs

references/logfile-guide.md

journald.yml.hbs

references/journald-guide.md

winlog.yml.hbs

references/winlog-guide.md

websocket.yml.hbs

references/websocket-guide.md

Handoff

• For CEL programs (

  cel.yml.hbs

  ), hand off to the

  cel-programs

  skill.
• For pipeline issues discovered while reviewing input templates, hand off to the

  ingest-pipelines

  skill.
• For field mapping issues found in template variable wiring, hand off to the

  ecs-field-mappings

  skill.

References

• references/common-input-patterns.md

  -- tags, processors passthrough, variable conventions, review flags (applies to ALL input types)

• references/httpjson-guide.md

  -- HTTPJSON template syntax, structure, validation rules, pagination patterns, authentication, cursor persistence