Follow up changes in documentation after #28927 (#29501)

* Follow up changes in the docs for logging
* add reference configuration

(cherry picked from commit 391a948)

auditbeat/auditbeat.reference.yml

@@ -1057,7 +1057,7 @@ output.elasticsearch:
   #path: "/tmp/auditbeat"
 
   # Name of the generated files. The default is `auditbeat` and it generates
-  # files: `auditbeat`, `auditbeat.1`, `auditbeat.2`, etc.
+  # files: `auditbeat-{datetime}.ndjson`, `auditbeat-{datetime}-1.ndjson`, etc.
   #filename: auditbeat
 
   # Maximum size in kilobytes of each file. When this size is reached, and on
@@ -1075,6 +1075,7 @@ output.elasticsearch:
 
   # Configure automatic file rotation on every startup. The default is true.
   #rotate_on_startup: true
+
 # ------------------------------- Console Output -------------------------------
 #output.console:
   # Boolean flag to enable or disable the output module.

filebeat/filebeat.reference.yml

@@ -1990,7 +1990,7 @@ output.elasticsearch:
   #path: "/tmp/filebeat"
 
   # Name of the generated files. The default is `filebeat` and it generates
-  # files: `filebeat`, `filebeat.1`, `filebeat.2`, etc.
+  # files: `filebeat-{datetime}.ndjson`, `filebeat-{datetime}-1.ndjson`, etc.
   #filename: filebeat
 
   # Maximum size in kilobytes of each file. When this size is reached, and on
@@ -2008,6 +2008,7 @@ output.elasticsearch:
 
   # Configure automatic file rotation on every startup. The default is true.
   #rotate_on_startup: true
+
 # ------------------------------- Console Output -------------------------------
 #output.console:
   # Boolean flag to enable or disable the output module.

heartbeat/heartbeat.reference.yml

@@ -1203,7 +1203,7 @@ output.elasticsearch:
   #path: "/tmp/heartbeat"
 
   # Name of the generated files. The default is `heartbeat` and it generates
-  # files: `heartbeat`, `heartbeat.1`, `heartbeat.2`, etc.
+  # files: `heartbeat-{datetime}.ndjson`, `heartbeat-{datetime}-1.ndjson`, etc.
   #filename: heartbeat
 
   # Maximum size in kilobytes of each file. When this size is reached, and on
@@ -1221,6 +1221,7 @@ output.elasticsearch:
 
   # Configure automatic file rotation on every startup. The default is true.
   #rotate_on_startup: true
+
 # ------------------------------- Console Output -------------------------------
 #output.console:
   # Boolean flag to enable or disable the output module.

libbeat/_meta/config/output-file.reference.yml.tmpl

@@ -16,7 +16,7 @@
   #path: "/tmp/{{.BeatName}}"
 
   # Name of the generated files. The default is `{{.BeatName}}` and it generates
-  # files: `{{.BeatName}}`, `{{.BeatName}}.1`, `{{.BeatName}}.2`, etc.
+  # files: `{{.BeatName}}-{datetime}.ndjson`, `{{.BeatName}}-{datetime}-1.ndjson`, etc.
   #filename: {{.BeatName}}
 
   # Maximum size in kilobytes of each file. When this size is reached, and on
@@ -33,4 +33,4 @@
   #permissions: 0600
 
   # Configure automatic file rotation on every startup. The default is true.
-  #rotate_on_startup: true
+  #rotate_on_startup: true

libbeat/outputs/fileout/docs/fileout.asciidoc

@@ -45,7 +45,8 @@ mandatory.
 ===== `filename`
 
 The name of the generated files. The default is set to the Beat name. For example, the files
-generated by default for {beatname_uc} would be "{beatname_lc}", "{beatname_lc}.1", "{beatname_lc}.2", and so on.
+generated by default for {beatname_uc} would be "{beatname_lc}-{{datetime}}.ndjson", "{beatname_lc}-{{datetime}}-1.ndjson",
+"{beatname_lc}-{{datetime}}-2.ndjson", and so on.
 
 ===== `rotate_every_kb`
 

metricbeat/metricbeat.reference.yml

@@ -1892,7 +1892,7 @@ output.elasticsearch:
   #path: "/tmp/metricbeat"
 
   # Name of the generated files. The default is `metricbeat` and it generates
-  # files: `metricbeat`, `metricbeat.1`, `metricbeat.2`, etc.
+  # files: `metricbeat-{datetime}.ndjson`, `metricbeat-{datetime}-1.ndjson`, etc.
   #filename: metricbeat
 
   # Maximum size in kilobytes of each file. When this size is reached, and on
@@ -1910,6 +1910,7 @@ output.elasticsearch:
 
   # Configure automatic file rotation on every startup. The default is true.
   #rotate_on_startup: true
+
 # ------------------------------- Console Output -------------------------------
 #output.console:
   # Boolean flag to enable or disable the output module.

packetbeat/packetbeat.reference.yml

@@ -1552,7 +1552,7 @@ output.elasticsearch:
   #path: "/tmp/packetbeat"
 
   # Name of the generated files. The default is `packetbeat` and it generates
-  # files: `packetbeat`, `packetbeat.1`, `packetbeat.2`, etc.
+  # files: `packetbeat-{datetime}.ndjson`, `packetbeat-{datetime}-1.ndjson`, etc.
   #filename: packetbeat
 
   # Maximum size in kilobytes of each file. When this size is reached, and on
@@ -1570,6 +1570,7 @@ output.elasticsearch:
 
   # Configure automatic file rotation on every startup. The default is true.
   #rotate_on_startup: true
+
 # ------------------------------- Console Output -------------------------------
 #output.console:
   # Boolean flag to enable or disable the output module.

winlogbeat/winlogbeat.reference.yml

@@ -988,7 +988,7 @@ output.elasticsearch:
   #path: "/tmp/winlogbeat"
 
   # Name of the generated files. The default is `winlogbeat` and it generates
-  # files: `winlogbeat`, `winlogbeat.1`, `winlogbeat.2`, etc.
+  # files: `winlogbeat-{datetime}.ndjson`, `winlogbeat-{datetime}-1.ndjson`, etc.
   #filename: winlogbeat
 
   # Maximum size in kilobytes of each file. When this size is reached, and on
@@ -1006,6 +1006,7 @@ output.elasticsearch:
 
   # Configure automatic file rotation on every startup. The default is true.
   #rotate_on_startup: true
+
 # ------------------------------- Console Output -------------------------------
 #output.console:
   # Boolean flag to enable or disable the output module.

x-pack/auditbeat/auditbeat.reference.yml

@@ -1113,7 +1113,7 @@ output.elasticsearch:
   #path: "/tmp/auditbeat"
 
   # Name of the generated files. The default is `auditbeat` and it generates
-  # files: `auditbeat`, `auditbeat.1`, `auditbeat.2`, etc.
+  # files: `auditbeat-{datetime}.ndjson`, `auditbeat-{datetime}-1.ndjson`, etc.
   #filename: auditbeat
 
   # Maximum size in kilobytes of each file. When this size is reached, and on
@@ -1131,6 +1131,7 @@ output.elasticsearch:
 
   # Configure automatic file rotation on every startup. The default is true.
   #rotate_on_startup: true
+
 # ------------------------------- Console Output -------------------------------
 #output.console:
   # Boolean flag to enable or disable the output module.

x-pack/filebeat/filebeat.reference.yml

@@ -4220,7 +4220,7 @@ output.elasticsearch:
   #path: "/tmp/filebeat"
 
   # Name of the generated files. The default is `filebeat` and it generates
-  # files: `filebeat`, `filebeat.1`, `filebeat.2`, etc.
+  # files: `filebeat-{datetime}.ndjson`, `filebeat-{datetime}-1.ndjson`, etc.
   #filename: filebeat
 
   # Maximum size in kilobytes of each file. When this size is reached, and on
@@ -4238,6 +4238,7 @@ output.elasticsearch:
 
   # Configure automatic file rotation on every startup. The default is true.
   #rotate_on_startup: true
+
 # ------------------------------- Console Output -------------------------------
 #output.console:
   # Boolean flag to enable or disable the output module.

x-pack/heartbeat/heartbeat.reference.yml

@@ -1203,7 +1203,7 @@ output.elasticsearch:
   #path: "/tmp/heartbeat"
 
   # Name of the generated files. The default is `heartbeat` and it generates
-  # files: `heartbeat`, `heartbeat.1`, `heartbeat.2`, etc.
+  # files: `heartbeat-{datetime}.ndjson`, `heartbeat-{datetime}-1.ndjson`, etc.
   #filename: heartbeat
 
   # Maximum size in kilobytes of each file. When this size is reached, and on
@@ -1221,6 +1221,7 @@ output.elasticsearch:
 
   # Configure automatic file rotation on every startup. The default is true.
   #rotate_on_startup: true
+
 # ------------------------------- Console Output -------------------------------
 #output.console:
   # Boolean flag to enable or disable the output module.

x-pack/metricbeat/metricbeat.reference.yml

@@ -2413,7 +2413,7 @@ output.elasticsearch:
   #path: "/tmp/metricbeat"
 
   # Name of the generated files. The default is `metricbeat` and it generates
-  # files: `metricbeat`, `metricbeat.1`, `metricbeat.2`, etc.
+  # files: `metricbeat-{datetime}.ndjson`, `metricbeat-{datetime}-1.ndjson`, etc.
   #filename: metricbeat
 
   # Maximum size in kilobytes of each file. When this size is reached, and on
@@ -2431,6 +2431,7 @@ output.elasticsearch:
 
   # Configure automatic file rotation on every startup. The default is true.
   #rotate_on_startup: true
+
 # ------------------------------- Console Output -------------------------------
 #output.console:
   # Boolean flag to enable or disable the output module.

x-pack/packetbeat/packetbeat.reference.yml

@@ -1552,7 +1552,7 @@ output.elasticsearch:
   #path: "/tmp/packetbeat"
 
   # Name of the generated files. The default is `packetbeat` and it generates
-  # files: `packetbeat`, `packetbeat.1`, `packetbeat.2`, etc.
+  # files: `packetbeat-{datetime}.ndjson`, `packetbeat-{datetime}-1.ndjson`, etc.
   #filename: packetbeat
 
   # Maximum size in kilobytes of each file. When this size is reached, and on
@@ -1570,6 +1570,7 @@ output.elasticsearch:
 
   # Configure automatic file rotation on every startup. The default is true.
   #rotate_on_startup: true
+
 # ------------------------------- Console Output -------------------------------
 #output.console:
   # Boolean flag to enable or disable the output module.

x-pack/winlogbeat/winlogbeat.reference.yml

@@ -1031,7 +1031,7 @@ output.elasticsearch:
   #path: "/tmp/winlogbeat"
 
   # Name of the generated files. The default is `winlogbeat` and it generates
-  # files: `winlogbeat`, `winlogbeat.1`, `winlogbeat.2`, etc.
+  # files: `winlogbeat-{datetime}.ndjson`, `winlogbeat-{datetime}-1.ndjson`, etc.
   #filename: winlogbeat
 
   # Maximum size in kilobytes of each file. When this size is reached, and on
@@ -1049,6 +1049,7 @@ output.elasticsearch:
 
   # Configure automatic file rotation on every startup. The default is true.
   #rotate_on_startup: true
+
 # ------------------------------- Console Output -------------------------------
 #output.console:
   # Boolean flag to enable or disable the output module.