The simplest configuration accepts system logs from /dev/log (from applications or forwarded by systemd) and writes everything to a single file: @version: current @include "scl.conf" log { source { ...

Now with more information and less opinion! What Input adds data attributes to the window based on the type of input being used. It also exposes a simple API that can be used for scripting ...