From 22226a7f3462f08080a0d1606ef1385231b1cbf5 Mon Sep 17 00:00:00 2001
From: Lee Hinman <57081003+leehinman@users.noreply.github.com>
Date: Tue, 22 Sep 2020 11:00:03 -0500
Subject: [PATCH] Add acceptable event log keys to winlog (#21205)

when running filebeat under elasti-agent 'id', 'meta' and 'revision'
are sent as config keys to the winlog input type.  This change allows
those config keys to pass validation.

(cherry picked from commit 499cc94b309ca0553589c9e7ea9bc1ca38dc7ba8)
---
 winlogbeat/eventlog/factory.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/winlogbeat/eventlog/factory.go b/winlogbeat/eventlog/factory.go
index 965ddbdac10..f66c158b2f2 100644
--- a/winlogbeat/eventlog/factory.go
+++ b/winlogbeat/eventlog/factory.go
@@ -28,7 +28,7 @@ import (
 )
 
 var commonConfigKeys = []string{"type", "api", "name", "fields", "fields_under_root",
-	"tags", "processors", "index"}
+	"tags", "processors", "index", "id", "meta", "revision"}
 
 // ConfigCommon is the common configuration data used to instantiate a new
 // EventLog. Each implementation is free to support additional configuration