mirror of
https://github.com/AlexMacocian/ServerManagementUtils.git
synced 2026-07-15 15:19:58 +00:00
48 lines
1.3 KiB
YAML
48 lines
1.3 KiB
YAML
# ============================== Filebeat inputs ===============================
|
|
|
|
filebeat.inputs:
|
|
- type: container # ← purpose-built input
|
|
id: docker-containers
|
|
paths:
|
|
- /var/lib/docker/containers/*/*.log # default JSON logs
|
|
stream: all
|
|
clean_removed: true
|
|
|
|
- type: filestream
|
|
id: my-filestream-id
|
|
enabled: false
|
|
paths:
|
|
- /var/log/*.log
|
|
|
|
# ============================== Filebeat modules ==============================
|
|
|
|
filebeat.config.modules:
|
|
path: ${path.config}/modules.d/*.yml
|
|
reload.enabled: false
|
|
|
|
# ======================= Elasticsearch template setting =======================
|
|
setup.ilm.enabled: false
|
|
setup.template.enabled: false
|
|
setup.template.settings:
|
|
index.number_of_shards: 1
|
|
|
|
# ---------------------------- Elasticsearch Output ----------------------------
|
|
output.elasticsearch:
|
|
hosts: ["replace-host"]
|
|
preset: balanced
|
|
username: "replace-user"
|
|
password: "replace-password"
|
|
|
|
# ================================= Processors =================================
|
|
processors:
|
|
- add_host_metadata:
|
|
when.not.contains.tags: forwarded
|
|
- add_cloud_metadata: ~
|
|
- add_docker_metadata: ~
|
|
- add_kubernetes_metadata: ~
|
|
- add_fields:
|
|
target: data_stream
|
|
fields:
|
|
type: logs
|
|
dataset: docker.containers
|
|
namespace: prod |