chore: enable filebeat for all hosts

roles/filebeat/handlers/main.yml

@@ -0,0 +1,4 @@
+- name: restart filebeat
+  systemd:
+    name: filebeat
+    state: restarted

roles/filebeat/tasks/main.yaml

@@ -31,3 +31,10 @@
   ansible.builtin.systemd:
     name: filebeat
     enabled: yes
+
+- name: copy filebeat config
+  template:
+    src: filebeat.yml
+    dest: /etc/filebeat/filebeat.yml
+  notify:
+    - restart filebeat

roles/filebeat/templates/filebeat.yml

@@ -1,10 +1,16 @@
+logging.level: error
 filebeat.inputs:
 
 - type: filestream
   id: kube1-var-log
   enabled: true
   paths:
-    - /var/log/*.log
+    - /var/log/syslog
+  fields:
+    syslog: true
+  processors:
+    - syslog:
+        field: message
 
 - type: log
   paths: