Hi team!
I exploring Beats and have some doubts about differences and limit between Beats installed over Operation System and ones over Kubernetes.
1 - At first look, appears Beats installed over Host/VM will collect more detailed log and metric data than deploy as DaemonSet on Kubernetes. This is true ?
2 - May I have both installed ? Any recommendation or best practice ?
3 - For example, with Auditbeat over Host we can collect all logins, Users, Processes regarding Operation System. So to get the same or similar insights for orchestration I need deploy it over kubernetes too ?
Consider this for an On-Premise scenario ( StandAlone).
Appreciate any help! Mauricio
https://www.elastic.co/guide/en/beats/filebeat/current/running-on-kubernetes.html
https://www.elastic.co/guide/en/beats/metricbeat/current/running-on-kubernetes.html
https://www.elastic.co/guide/en/beats/auditbeat/current/running-on-kubernetes.html