Skip to content

Commit

Permalink
fix(filebeat): set explicit Docker-centric defaults
Browse files Browse the repository at this point in the history
The default_config changed in elastic/beats@41ab08cd (v8.12.0) from
Docker to Kubernetes defaults. This change also changes the default
output from 'container' to 'input'.

Before we are able to update to v8.12, we need to set defaults which are
suitable for the configuration that docker-elk ships with.

Refs:
  https://github.com/elastic/beats/blob/v8.12.0/filebeat/autodiscover/builder/hints/config.go#L30-L51
  https://www.elastic.co/guide/en/beats/filebeat/8.12/filebeat-input-container.html
  https://www.elastic.co/guide/en/beats/filebeat/8.12/filebeat-input-filestream.html
  • Loading branch information
antoineco committed Feb 12, 2024
1 parent 59fcf83 commit 44822f6
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions extensions/filebeat/config/filebeat.yml
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,10 @@ filebeat.autodiscover:
# containers as they start and stop.
- type: docker
hints.enabled: true
hints.default_config:
type: container
paths:
- /var/lib/docker/containers/${data.container.id}/*-json.log

processors:
- add_cloud_metadata: ~
Expand Down

0 comments on commit 44822f6

Please sign in to comment.