IIS ignore older option

packages/iis/changelog.yml

@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.1.0"
+  changes:
+    - description: Add Ignore older than flag for logs stream
+      type: enhancement
+      link: https://github.com/elastic/integrations/pull/4212
 - version: "1.0.0"
   changes:
     - description: Make IIS GA

packages/iis/data_stream/access/agent/stream/log.yml.hbs

@@ -1,3 +1,6 @@
+{{#if ignore_older}}
+    ignore_older: {{ignore_older}}
+{{/if}}
 paths:
 {{#each paths as |path i|}}
  - {{path}}

packages/iis/data_stream/access/manifest.yml

@@ -36,6 +36,14 @@ streams:
         description: >
           Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.
 
+      - name: ignore_older
+        type: text
+        title: Ignore events older than
+        default: 72h
+        required: false
+        show_user: false
+        description: >-
+          If this option is specified, events that are older than the specified amount of time are ignored. Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h".
     template_path: "log.yml.hbs"
     title: "IIS access logs (log)"
     description: "Collect IIS access logs using log input"

packages/iis/data_stream/error/agent/stream/log.yml.hbs

@@ -1,3 +1,6 @@
+{{#if ignore_older}}
+    ignore_older: {{ignore_older}}
+{{/if}}
 paths:
 {{#each paths as |path i|}}
  - {{path}}

packages/iis/data_stream/error/manifest.yml

@@ -36,6 +36,14 @@ streams:
         description: >
           Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.
 
+      - name: ignore_older
+        type: text
+        title: Ignore events older than
+        default: 72h
+        required: false
+        show_user: false
+        description: >-
+          If this option is specified, events that are older than the specified amount of time are ignored. Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h".
     template_path: "log.yml.hbs"
     title: "IIS error logs (log)"
     description: "Collect IIS error logs using log input"

packages/iis/manifest.yml

@@ -1,6 +1,6 @@
 name: iis
 title: IIS
-version: 1.0.0
+version: 1.1.0
 description: Collect logs and metrics from Internet Information Services (IIS) servers with Elastic Agent.
 type: integration
 icons: