Docker Filebeat image

Filebeat is a lightweight, open source shipper for log file data. As the next-generation Logstash Forwarder, Filebeat tails logs and quickly sends this information to Logstash for further parsing and enrichment or to Elasticsearch for centralized storage and analysis.

Supported tags and respective Dockerfile links

• 1.2.3, 1.2 (Dockerfile)
• 1.3.1, 1.3, 1 (Dockerfile)
• 5.0.1, 5.0 (Dockerfile)
• 5.1.2, 5.1 (Dockerfile)
• 5.2.2, 5.2 (Dockerfile)
• 5.3.0, 5.3 (Dockerfile)
• 5.4.3, 5.4 (Dockerfile)
• 5.5.2, 5.5 (Dockerfile)
• 5.6.8, 5.6, 5 (Dockerfile)
• 6.2.3, 6.2, 6, latest (Dockerfile)

Build and update process

This image is automatically built at every push of this repository and every time that the debian:jessie base image gets updated in order to ensure that bugfixes and security updates are immediately applied.

Run

docker run -v /path/to/filebeat.yml:/filebeat.yml prima/filebeat:6

Or, you can create your own derived image, with the configuration in the image itself.

FROM prima/filebeat
COPY my-config/filebeat.yml /filebeat.yml

Configuration file

You can find an example of the filebeat.yml in the official filebeat repository: https://github.com/elastic/beats/blob/master/filebeat/filebeat.yml

And in the official docs: https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-configuration.html