44822f6045
fix(filebeat): set explicit Docker-centric defaults
...
The default_config changed in elastic/beats@41ab08cd (v8.12.0) from
Docker to Kubernetes defaults. This change also changes the default
output from 'container' to 'input'.
Before we are able to update to v8.12, we need to set defaults which are
suitable for the configuration that docker-elk ships with.
Refs:
https://github.com/elastic/beats/blob/v8.12.0/filebeat/autodiscover/builder/hints/config.go#L30-L51
https://www.elastic.co/guide/en/beats/filebeat/8.12/filebeat-input-container.html
https://www.elastic.co/guide/en/beats/filebeat/8.12/filebeat-input-filestream.html
2024-02-12 10:00:07 +01:00
87f5894f65
feat(ext/beats): Use unprivileged publish users
2022-11-22 11:37:50 +01:00
141b38a083
feat(ext/metricbeat): Further drop perms for monitoring
...
The built-in 'remote_monitoring_user' has full permissions on monitoring
indices, which is more than Metricbeat needs to collect metrics from
remote components.
2022-11-18 21:47:46 +01:00
654a18dcdb
feat(ext/beats): Monitor using unprivileged user
...
Both the collection and storage of monitoring data are now performed
using the unpriviliged built-in users 'remote_monitoring_user' and
'beats_system' respectively, instead of the 'elastic' superuser.
2022-11-18 17:10:20 +01:00
ac464b2d99
feat(ext/beats): Monitor via internal collectors
2022-11-18 14:01:02 +01:00
9f674eca40
chore: Clean up config
2022-11-17 21:24:46 +01:00
b11cc1cd7c
fix(doc): Update branch in links to Elastic repos
2022-09-20 16:22:57 +02:00
924a1e5987
chore: Update Compose file version to 3.7
...
Allows enabling the 'init' option in the 'setup' service.
Requires Docker 18.06.0 and Compose 1.22.0.
2022-02-28 09:50:52 +01:00
eb1c6fa27e
chore: Rename ELK_VERSION to ELASTIC_VERSION
...
More appropriate name considering that extensions, which aren't part of
the "ELK" stack, also rely on this variable.
2022-02-28 09:10:30 +01:00
9877b39900
Automate management of required roles and user passwords ( #671 )
2022-02-21 11:19:43 +01:00
641290c20a
Apply SELinux options to bind mounts
...
https://docs.docker.com/storage/bind-mounts/
Related to #639
Closes #661
2022-02-11 20:11:22 +01:00
ca98168da1
Quote passwords to prevent interpreting leading special chars
...
Closes #667
2022-02-11 19:10:58 +01:00
1815972838
Add Filebeat extension
2021-12-04 02:17:41 +01:00
Antoine Cotten