mirror of
https://github.com/FAUSheppy/no-secrets-athq-ansible
synced 2025-12-10 12:18:33 +01:00
51 lines
1.0 KiB
YAML
51 lines
1.0 KiB
YAML
logging.level: error
|
|
filebeat.inputs:
|
|
|
|
- type: filestream
|
|
id: kube1-var-log
|
|
enabled: true
|
|
paths:
|
|
- /var/log/syslog
|
|
fields:
|
|
syslog: true
|
|
processors:
|
|
- syslog:
|
|
field: message
|
|
|
|
- type: log
|
|
paths:
|
|
- "/var/lib/docker/containers/*/*.log"
|
|
json.keys_under_root: true
|
|
json.add_error_key: true
|
|
json.overwrite_keys: true
|
|
fields:
|
|
container_logs: true
|
|
processors:
|
|
- dissect:
|
|
tokenizer: '{"test": %{json_data}}'
|
|
field: message
|
|
target_prefix: ""
|
|
ignore_failure: true
|
|
|
|
filebeat.config.modules:
|
|
path: ${path.config}/modules.d/*.yml
|
|
reload.enabled: false
|
|
|
|
setup.template.settings:
|
|
index.number_of_shards: 1
|
|
|
|
setup.kibana:
|
|
output.logstash:
|
|
hosts: ["192.168.122.1:5044"]
|
|
|
|
processors:
|
|
- add_host_metadata:
|
|
when.not.contains.tags: forwarded
|
|
- add_cloud_metadata: ~
|
|
- add_docker_metadata: ~
|
|
- add_kubernetes_metadata: ~
|
|
- drop_fields:
|
|
fields: ["host.ip", "host.mac"]
|
|
- add_docker_metadata:
|
|
host: "unix:///var/run/docker.sock"
|