docs: pipeline: inputs: winevtlog: document event_data_as_map option

[eschabell]

Document the event_data_as_map and event_template_cache_size options added to the in_winevtlog plugin, which emit EventData as a named map built from provider metadata instead of string inserts.

Note, code commit 6b005e6c4 without corresponding docs PR.

Summary by CodeRabbit

• Documentation
  • Documented the event_data_as_map option for Windows Event Log input.
  • Explained how event data is represented as a field-name keyed map when enabled.
  • Added configuration requirements and YAML/config-file examples.
  • Clarified the relationship with template cache sizing and related validation behavior.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 432bdb63-7638-4264-9790-154b68594707

📥 Commits

Reviewing files that changed from the base of the PR and between a391227 and 87b2fc8.

📒 Files selected for processing (1)

• pipeline/inputs/windows-event-log-winevtlog.md

---

📝 Walkthrough

Walkthrough

The winevtlog input documentation adds the event_data_as_map parameter, explains its dependency on event_template_cache_size, and provides YAML and configuration-file examples.

Changes

winevtlog EventData map

Layer / File(s)	Summary
Document EventData map configuration pipeline/inputs/windows-event-log-winevtlog.md	The parameter table and new section describe named EventData mapping, the required positive template cache size, and example configurations.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Suggested labels: 5.0

Suggested reviewers: patrick-stephens

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly matches the doc update for the new event_data_as_map option.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[eschabell]

@patrick-stephens ready for review and I've added the exact triggering code commit for you!