Cannot get Kubernetes Metadata after migrating to Containerd

Elastic Stack Beats
,
1

Hello,
After I migrated my cluster to containerd, logs are no longer on /var/lib/docker but rather in /var/log/pods///.log and symlinks in /var/log/containers/.log.

I configured filebeat with the following and although I get logs, I cannot get kubernetes metadata such as labels:

apiVersion: v1
data:
  filebeat.yml: |
    filebeat.inputs:
    - type: container
      paths:
        - "/var/log/pods/*/*/*.log"
      processors:
        - add_kubernetes_metadata:
            host: ${NODE_NAME}
            in_cluster: true
            default_indexers.enabled: true
            default_matchers.enabled: true
    output.logstash:
      hosts: ${LOGSTASH_SVC}
    logging.level: debug

Please help! My logging logic heavily relies on kubernetes labels!

THANKS SO MUCH!

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.