Commit Graph

10 Commits

Author SHA1 Message Date
Antoine Cotten 5da1badcf9
feat(ext/filebeat): ingest ES logs via elasticsearch module
Ensures that Elasticsearch log entries are processed through dedicated
ingestion pipelines, so that their fields can be automatically
extracted.
2024-02-14 20:46:37 +01:00
Antoine Cotten 44822f6045
fix(filebeat): set explicit Docker-centric defaults
The default_config changed in elastic/beats@41ab08cd (v8.12.0) from
Docker to Kubernetes defaults. This change also changes the default
output from 'container' to 'input'.

Before we are able to update to v8.12, we need to set defaults which are
suitable for the configuration that docker-elk ships with.

Refs:
  https://github.com/elastic/beats/blob/v8.12.0/filebeat/autodiscover/builder/hints/config.go#L30-L51
  https://www.elastic.co/guide/en/beats/filebeat/8.12/filebeat-input-container.html
  https://www.elastic.co/guide/en/beats/filebeat/8.12/filebeat-input-filestream.html
2024-02-12 10:00:07 +01:00
Antoine Cotten 87f5894f65
feat(ext/beats): Use unprivileged publish users 2022-11-22 11:37:50 +01:00
Antoine Cotten 654a18dcdb
feat(ext/beats): Monitor using unprivileged user
Both the collection and storage of monitoring data are now performed
using the unpriviliged built-in users 'remote_monitoring_user' and
'beats_system' respectively, instead of the 'elastic' superuser.
2022-11-18 17:10:20 +01:00
Antoine Cotten ac464b2d99
feat(ext/beats): Monitor via internal collectors 2022-11-18 14:01:02 +01:00
Antoine Cotten 9f674eca40
chore: Clean up config 2022-11-17 21:24:46 +01:00
Antoine Cotten b11cc1cd7c
fix(doc): Update branch in links to Elastic repos 2022-09-20 16:22:57 +02:00
Antoine Cotten 9877b39900
Automate management of required roles and user passwords (#671) 2022-02-21 11:19:43 +01:00
Antoine Cotten ca98168da1
Quote passwords to prevent interpreting leading special chars
Closes #667
2022-02-11 19:10:58 +01:00
Antoine Cotten 1815972838
Add Filebeat extension 2021-12-04 02:17:41 +01:00