filebeat.yml 642 B

123456789101112131415161718192021222324252627282930
  1. filebeat.inputs:
  2. - type: filestream
  3. enabled: true
  4. paths:
  5. - "/var/log/*.log"
  6. - "/var/log/messages"
  7. exclude_lines: [".*mdnsd.*", ".*syslogd.*"]
  8. - type: filestream
  9. enabled: true
  10. paths:
  11. - "/var/log/*.json"
  12. fields_under_root: true
  13. json.message_key: message
  14. fields:
  15. tags: ["json"]
  16. filebeat.config.modules:
  17. path: ${path.config}/filebeat.modules.d/*.yml
  18. reload.enabled: false
  19. setup.template.settings:
  20. index.number_of_shards: 1
  21. output.logstash:
  22. hosts: ["logstash.service:5044"]
  23. processors:
  24. - add_host_metadata:
  25. when.not.contains.tags: forwarded
  26. - add_cloud_metadata: ~