# Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # http://www.apache.org/licenses/LICENSE-2.0 # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. ######################## Filebeat Configuration ############################ filebeat.inputs: #------------------------------ Docker input -------------------------------- # Experimental: Docker input reads and parses `json-file` logs from Docker - type: docker enabled: true # Combine partial lines flagged by `json-file` format #combine_partials: true # Use this to read from all containers, replace * with a container id to read from one: containers: # stream: all # can be all, stdout or stderr ids: - '*' processors: - add_docker_metadata: ~ # # The following example enriches each event with host metadata. # #processors: #- add_host_metadata: # netinfo.enabled: false # #-------------------------- Elasticsearch output ------------------------------- output.elasticsearch: # Boolean flag to enable or disable the output module. #enabled: true # Array of hosts to connect to. # Scheme and port can be left out and will be set to the default (http and 9200) # In case you specify and additional path, the scheme is required: http://localhost:9200/path # IPv6 addresses should always be defined as: https://[2001:db8::1]:9200 hosts: ["elasticsearch:9200"] logging.to_files: true