Change filebeat docker

filebeat/filebeat.yml

@@ -1,6 +1,13 @@
 # ============================== Filebeat inputs ===============================
 
 filebeat.inputs:
+- type: container                 # ← purpose-built input
+  id: docker-containers
+  paths:
+    - /var/lib/docker/containers/*/*.log   # default JSON logs
+  stream: all
+  clean_removed: true
+
 - type: filestream
   id: my-filestream-id
   enabled: false
@@ -32,4 +39,10 @@ processors:
       when.not.contains.tags: forwarded
   - add_cloud_metadata: ~
   - add_docker_metadata: ~
-  - add_kubernetes_metadata: ~
+  - add_kubernetes_metadata: ~
+  - add_fields:
+      target: data_stream
+      fields:
+        type: logs
+        dataset: docker.containers
+        namespace: prod

filebeat/modules.d/docker.yml

@@ -1,11 +0,0 @@
-# Module: docker
-- module: docker
-  container_logs:
-    enabled: true
-    
-    # Set custom paths if your docker log location is different
-    #var.paths:
-    #  - /var/lib/docker/containers/*/*.log
-    var.stream: all
-    var.clean_removed: true
-    var.add_docker_metadata: true