Filebeat 7.x 收集docker 容器日志

最新推荐文章于 2025-04-14 09:56:44 发布

liuweiyizhu

最新推荐文章于 2025-04-14 09:56:44 发布

阅读量1.6k

点赞数

分类专栏： ELK 文章标签： docker elasticsearch

本文链接：https://blog.youkuaiyun.com/liuweiyizhu/article/details/108623230

版权

ELK 专栏收录该内容

1 篇文章

订阅专栏

filebeat 7.x 简单配置docker 日志收集

filebeat.inputs:
- type: log
  enabled: true
  paths:
    - /var/lib/docker/containers/*/*-json.log
filebeat.config.modules:
  path: ${path.config}/modules.d/*.yml
  reload.enabled: false
setup.template.settings:
  index.number_of_shards: 1
setup.template.enabled: true
setup.template.name: "docker116"
setup.template.pattern: "docker116-*"
# 关闭ilm
setup.ilm.enabled: false
setup.ilm.rollover_alias: "docker116"
setup.ilm.pattern: "{now/d}-000001"
setup.kibana:
output.elasticsearch:
  hosts: ["localhost:9200"]
  index: "docker116-%{+yyyy.MM.dd}"
processors:
  - add_host_metadata:
      when.not.contains.tags: forwarded
  - add_cloud_metadata: ~
  - add_docker_metadata: ~
  - add_kubernetes_metadata: ~