[general] state_file = /var/awslogs/state/agent-state [/var/log/syslog] #@erin upddate the file path below #file = /var/log/vault_audit.logstatus log_group_name = Nomad-Audit-Logs log_stream_name = {instance_id} datetime_format = %b %d %H:%M:%S