Well, considering he posted his

filebeat.yml

, going to guess that's how it's currently working