I'm trying to send docker logs to logstash via filebeat, but the docker fields that are supposed to be added by filebeat don't show up in logsatsh like the docker.container.name, docker.container.image etc ...
my filebeat.yml:
filebeat.inputs:
- type: docker
containers:
path: "/var/lib/docker/containers"
ids:
- "e941afe02239874e0c08d78194b2caf0a9821770cd5375dfba5535e1ce0a7758"
output.logstash:
hosts: ["localhost:5044"]
logstash.conf:
input {
beats{
port => 5044
}
}
output{
stdout{}
}