[Custom Logs] Documentation tells /var/log/*.log is being ingested by System

[ulab]

Hi,

the Custom Logs documentation says

Identify the log location at that machine e.g. /tmp/custom.log. Note that /var/log/*.log is fully ingested by the System, no need to add this path if the System integration is already used

Yet, the System integration by default only sets up:

• Auth logs: /var/log/auth.log*, /var/log/secure*
• System syslog logs: /var/log/messages*, /var/log/syslog*

But not /var/log/*.log.

[botelastic[bot]]

Hi! We just realized that we haven't looked into this issue in a while. We're sorry! We're labeling this issue as Stale to make it hit our filters and make sure we get back to it as soon as possible. In the meantime, it'd be extremely helpful if you could take a look at it as well and confirm its relevance. A simple comment with a nice emoji will be enough :+1. Thank you for your contribution!

[ulab]

Reference:

https://docs.elastic.co/integrations/log