Cannot get Kubernetes Metadata after migrating to Containerd

Hello,
After I migrated my cluster to containerd, logs are no longer on /var/lib/docker but rather in /var/log/pods///.log and symlinks in /var/log/containers/.log.

I configured filebeat with the following and although I get logs, I cannot get kubernetes metadata such as labels:

apiVersion: v1
data:
  filebeat.yml: |
    filebeat.inputs:
    - type: container
      paths:
        - "/var/log/pods/*/*/*.log"
      processors:
        - add_kubernetes_metadata:
            host: ${NODE_NAME}
            in_cluster: true
            default_indexers.enabled: true
            default_matchers.enabled: true
    output.logstash:
      hosts: ${LOGSTASH_SVC}
    logging.level: debug

Please help! My logging logic heavily relies on kubernetes labels!

THANKS SO MUCH!

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.