Filebeat CEL input - ingest complete config file when it changes

filebeat.cel.yml

---

filebeat.inputs:
  - type: cel
    id: config-123-watcher
    interval: 1m
    resource:
      url: file:///etc/conf.d/foo.conf
    program: |
      file(state.url).as(content, content.sha256().hex().as(hash, {
          'url': state.url,
          'cursor': {
            'sha256': hash,
          },
          'want_more': false,
          'events': has(state.cursor) && has(state.cursor.sha256) && state.cursor.sha256 == hash ? [] : [{
            'file': {
              'path': state.url.trim_prefix('file://'),
              'hash': {
                'sha256': hash,
              }
            },
            'related': {
              'hash': [hash],
            },
            'ecs': {'version': '8.8.0'},
            'message': string(content),
          }],
      }))
    publisher_pipeline.disable_host: true

output.console.pretty: true

logging:
  level: debug
  selectors:
    - input.cel