From 9e0dad7bdd06ffa957f0c2492be1a6a6916267fe Mon Sep 17 00:00:00 2001
From: Steve Mokris <smokris@softpixel.com>
Date: Tue, 18 Jan 2022 10:27:48 -0500
Subject: [PATCH] Fix YAML indentation in `parsers` examples (#29663)

See discussion on https://discuss.elastic.co/t/filebeat-filestream-input-parsers-multiline-fails/290543/9.
---
 .../input-filestream-reader-options.asciidoc     | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/filebeat/docs/inputs/input-filestream-reader-options.asciidoc b/filebeat/docs/inputs/input-filestream-reader-options.asciidoc
index b2c0fa2fb706..2624928b1542 100644
--- a/filebeat/docs/inputs/input-filestream-reader-options.asciidoc
+++ b/filebeat/docs/inputs/input-filestream-reader-options.asciidoc
@@ -164,11 +164,11 @@ The multiline message is stored under the key `msg`.
   ...
   parsers:
     - ndjson:
-      keys_under_root: true
-      message_key: msg
+        keys_under_root: true
+        message_key: msg
     - multiline:
-      type: counter
-      lines_count: 3
+        type: counter
+        lines_count: 3
 ----
 
 See the available parser settings in detail below.
@@ -197,9 +197,9 @@ Example configuration:
 [source,yaml]
 ----
 - ndjson:
-  keys_under_root: true
-  add_error_key: true
-  message_key: log
+    keys_under_root: true
+    add_error_key: true
+    message_key: log
 ----
 
 *`keys_under_root`*:: By default, the decoded JSON is placed under a "json" key
@@ -256,5 +256,5 @@ all containers under the default Kubernetes logs path:
     - "/var/log/containers/*.log"
   parsers:
     - container:
-      stream: stdout
+        stream: stdout
 ----