-
Notifications
You must be signed in to change notification settings - Fork 0
/
filebeat.yml.j2
67 lines (64 loc) · 2.44 KB
/
filebeat.yml.j2
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
filebeat.registry.path: /usr/share/filebeat/data/registry
filebeat.autodiscover:
providers:
- type: docker
templates:
# Teku, Besu and Nethermind throw multiline exceptions, Filebeat needs multiline config to handle it
- condition:
or:
- equals:
docker.container.labels.slingnode_client: besu
- equals:
docker.container.labels.slingnode_client: nethermind
- equals:
docker.container.labels.slingnode_client: teku
- equals:
docker.container.labels.slingnode_client: lodestar
config:
- type: container
paths:
- /var/lib/docker/containers/${data.docker.container.id}/*.log
multiline.type: pattern
multiline.pattern: '^[0-9]{4}-[0-9]{2}-[0-9]{2}'
multiline.negate: true
multiline.match: after
fields:
log_type: docker
fields_under_root: true
# Lodestar throw multiline exceptions, Filebeat needs multiline config to handle it
- condition:
or:
- equals:
docker.container.labels.slingnode_client: lodestar
config:
- type: container
paths:
- /var/lib/docker/containers/${data.docker.container.id}/*.log
multiline.type: pattern
multiline.pattern: '^Error:|^[[:space:]]+'
multiline.negate: true
multiline.match: after
fields:
log_type: docker
fields_under_root: true
- condition:
or:
- equals:
docker.container.labels.slingnode_client: geth
- equals:
docker.container.labels.slingnode_client: erigon
- equals:
docker.container.labels.slingnode_layer: consensus
- equals:
docker.container.labels.slingnode_layer: validator
config:
- type: container
paths:
- /var/lib/docker/containers/${data.docker.container.id}/*.log
fields:
log_type: docker
fields_under_root: true
output.logstash:
hosts: ["{{ container_name_elk if single_server_deployment else monitoring_server_host }}:{{ logstash_port }}"]
enabled: true
timeout: 15