providers:
- type: kubernetes
templates:
- condition:
equals:
kubernetes.labels.puzl-cloud-logging: "true"
config:
- type: container
paths:
- /var/lib/docker/containers/${data.kubernetes.container.id}/*.log
processors:
- decode_json_fields:
process_array: true
overwrite_keys: true
target: ""
fields: ["message"]
max_depth: 3
У меня примерно так выглядит filebeat.inputs: - type: container paths: - /var/lib/docker/containers/*/*.log processors: - add_kubernetes_metadata: host: ${NODE_NAME} processors: - drop_fields: fields: - "kubernetes.labels" - "kubernetes.container.image" - "kubernetes.pod" - "kubernetes.replicaset" - "agent" - "log" - "ecs" - "input" - "beats_type" - "host" ignore_missing: true output.logstash: hosts: 'graylog-tcp.logs.svc.cluster.local:5044'
Обсуждают сегодня