receivers:
  windowseventlog/application:
    channel: Application
  windowseventlog/system:
    channel: System
  # Security needs the collector to run as LocalSystem or as a member of
  # Event Log Readers.
  windowseventlog/security:
    channel: Security

processors:
  memory_limiter:
    check_interval: 1s
    limit_percentage: 80
    spike_limit_percentage: 25
  # The rendered text is in the body twice: message and rendering_info.
  transform/drop-rendered:
    error_mode: ignore
    log_statements:
      - context: log
        statements:
          - delete_key(body, "message")
          - delete_key(body, "rendering_info")
  batch:
    timeout: 5s

exporters:
  otlphttp:
    endpoint: https://your-backend:4318

service:
  pipelines:
    logs:
      receivers: [windowseventlog/application, windowseventlog/system, windowseventlog/security]
      processors: [memory_limiter, transform/drop-rendered, batch]
      exporters: [otlphttp]