{
  "sensor_id": "local",
  "socket": "../var/ingest.sock",
  "metrics": "127.0.0.1:9710",
  "rules": [
    "rules.nfs"
  ],
  "queue": {
    "path": "../var/events.wal",
    "max_bytes": 268435456
  },
  "file": {
    "enabled": true,
    "path": "../var/events.ndjson",
    "max_bytes": 16777216,
    "keep": 8
  },
  "dataway": {
    "enabled": false,
    "url": "https://dataway.example.com",
    "token_env": "NETFLOWSCOUT_DATAWAY_TOKEN"
  },
  "privacy": {
    "raw_fields": {}
  },
  "service": "example-app",
  "capture": {
    "interface": "",
    "filter": "tcp or udp",
    "application_source": "endpoint"
  },
  "stream_socket": "../var/streams.sock",
  "plugins": [
    "/usr/local/lib/netflowscout/plugins"
  ],
  "verification": {
    "enabled": false
  },
  "http": {
    "request_events": false,
    "headers": [
      "content-type",
      "x-request-id",
      "traceparent"
    ],
    "query_keys": []
  },
  "recording": {
    "enabled": true,
    "directory": "../var/captures",
    "mode": "continuous",
    "sources": [
      "network",
      "endpoint"
    ],
    "protocols": [
      "http",
      "mysql",
      "postgresql",
      "redis"
    ],
    "services": [
      "example-app"
    ],
    "max_file_bytes": 16777216,
    "max_total_bytes": 268435456,
    "max_files": 256,
    "buffer_bytes": 33554432,
    "max_flows": 512,
    "retention_hours": 24,
    "event_retention_hours": 168
  }
}