iac
/
docker-elk
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix(filebeat): set explicit Docker-centric defaults 

The default_config changed in elastic/beats@41ab08cd (v8.12.0) from
Docker to Kubernetes defaults. This change also changes the default
output from 'container' to 'input'.

Before we are able to update to v8.12, we need to set defaults which are
suitable for the configuration that docker-elk ships with.

Refs:
  https://github.com/elastic/beats/blob/v8.12.0/filebeat/autodiscover/builder/hints/config.go#L30-L51
  https://www.elastic.co/guide/en/beats/filebeat/8.12/filebeat-input-container.html
  https://www.elastic.co/guide/en/beats/filebeat/8.12/filebeat-input-filestream.html
This commit is contained in:
Antoine Cotten 2024-02-12 10:00:07 +01:00
parent 59fcf834b2
commit 44822f6045
No known key found for this signature in database
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
extensions/filebeat/config/filebeat.yml
View File

@ -15,6 +15,10 @@ filebeat.autodiscover:
# containers as they start and stop. # containers as they start and stop.
- type: docker - type: docker
hints.enabled: true hints.enabled: true
hints.default_config:
type: container
paths:
- /var/lib/docker/containers/${data.container.id}/*-json.log
processors: processors:
- add_cloud_metadata: ~ - add_cloud_metadata: ~