Fix cloudtrail

Author: kpollich

packages/aws/data_stream/cloudtrail/manifest.yml

@@ -147,14 +147,14 @@ streams:
         description: The maximum number of SQS messages that can be inflight at any time.
         default: 5
         required: false
-        show_user: false
-      - name: custom_configurations
+      - name: custom
         type: yaml
         title: Custom configurations
         multi: false
         required: false
         show_user: false
-        description: Custom settings for the underlying inputs
+        description: >
+          Additional settings to be added to the configuration. Be careful using this as it might break the input as those settings are not validated and can override the settings specified above. See [`aws-s3` input settings docs](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-aws-s3.html) for details.
   - input: httpjson
     title: AWS CloudTrail Logs via Splunk Enterprise REST API
     description: Collect AWS CloudTrail logs via Splunk Enterprise REST API
@@ -382,12 +382,4 @@ streams:
         type: bool
         multi: false
         default: false
-      - name: custom
-        type: yaml
-        title: Custom configurations
-        multi: false
-        required: false
-        show_user: false
-        description: >
-          Additional settings to be added to the configuration. Be careful using this as it might break the input as those settings are not validated and can override the settings specified above. See [`aws-s3` input settings docs](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-aws-s3.html) for details.