I have filbeat running as an docker container and want to use the autodiscover to gather the container logs. My Docker daemon is secured, as described here: Protect the Docker daemon socket | Docker Docs
where can i set the ssl/tls settings so filebeat knows where the certs are?
filebeat.yml:
filebeat.autodiscover:
providers:
- type: docker
host: "tcp://Hostname:2375"
templates:
- condition:
contains:
docker.container.image: '*'
config:
- type: docker
containers.ids:
- "${data.docker.container.id}"
Log output:
{"level":"info","timestamp":"2018-08-17T12:36:06.112Z","caller":"instance/beat.go:492","message":"Home path: [/usr/share/filebeat] Config path: [/usr/share/filebeat] Data path: [/usr/share/filebeat/data] Logs path: [/usr/share/filebeat/logs]"}
{"level":"debug","timestamp":"2018-08-17T12:36:06.113Z","logger":"beat","caller":"instance/beat.go:519","message":"Beat metadata path: /usr/share/filebeat/data/meta.json"}
{"level":"info","timestamp":"2018-08-17T12:36:06.113Z","caller":"instance/beat.go:499","message":"Beat UUID: 29e392bc-e06d-40fa-96b0-9977563057a0"}
{"level":"info","timestamp":"2018-08-17T12:36:06.113Z","logger":"beat","caller":"instance/beat.go:716","message":"Beat info","system_info":{"beat":{"path":{"config":"/usr/share/filebeat","data":"/usr/share/filebeat/data","home":"/usr/share/filebeat","logs":"/usr/share/filebeat/logs"},"type":"filebeat","uuid":"29e392bc-e06d-40fa-96b0-9977563057a0"}}}
{"level":"info","timestamp":"2018-08-17T12:36:06.113Z","logger":"beat","caller":"instance/beat.go:725","message":"Build info","system_info":{"build":{"commit":"45a9a9e1561b6c540e94211ebe03d18abcacae55","libbeat":"6.3.2","time":"2018-07-20T04:18:19.000Z","version":"6.3.2"}}}
{"level":"info","timestamp":"2018-08-17T12:36:06.113Z","logger":"beat","caller":"instance/beat.go:728","message":"Go runtime info","system_info":{"go":{"os":"linux","arch":"amd64","max_procs":2,"version":"go1.9.4"}}}
{"level":"info","timestamp":"2018-08-17T12:36:06.115Z","logger":"beat","caller":"instance/beat.go:732","message":"Host info","system_info":{"host":{"architecture":"x86_64","boot_time":"2018-06-20T11:11:09Z","containerized":true,"hostname":"hostname","ips":["127.0.0.1/8","172.18.0.3/16"],"kernel_version":"3.10.0-693.11.6.el7.x86_64","mac_addresses":["02:42:ac:12:00:03"],"os":{"family":"redhat","platform":"centos","name":"CentOS Linux","version":"7 (Core)","major":7,"minor":5,"patch":1804,"codename":"Core"},"timezone":"UTC","timezone_offset_sec":0}}}
{"level":"info","timestamp":"2018-08-17T12:36:06.115Z","logger":"beat","caller":"instance/beat.go:761","message":"Process info","system_info":{"process":{"capabilities":{"inheritable":["chown","dac_override","fowner","fsetid","kill","setgid","setuid","setpcap","net_bind_service","net_raw","sys_chroot","mknod","audit_write","setfcap"],"permitted":null,"effective":null,"bounding":["chown","dac_override","fowner","fsetid","kill","setgid","setuid","setpcap","net_bind_service","net_raw","sys_chroot","mknod","audit_write","setfcap"],"ambient":null},"cwd":"/usr/share/filebeat","exe":"/usr/share/filebeat/filebeat","name":"filebeat","pid":1,"ppid":0,"seccomp":{"mode":"filter"},"start_time":"2018-08-17T12:36:05.610Z"}}}
{"level":"info","timestamp":"2018-08-17T12:36:06.116Z","caller":"instance/beat.go:225","message":"Setup Beat: filebeat; Version: 6.3.2"}
{"level":"debug","timestamp":"2018-08-17T12:36:06.116Z","logger":"beat","caller":"instance/beat.go:242","message":"Initializing output plugins"}
{"level":"debug","timestamp":"2018-08-17T12:36:06.149Z","logger":"docker","caller":"docker/client.go:29","message":"Negotiating client version"}
{"level":"debug","timestamp":"2018-08-17T12:36:06.150Z","logger":"docker","caller":"docker/client.go:32","message":"Failed to perform ping: Cannot connect to the Docker daemon at tcp://hostname:2375. Is the docker daemon running?"}
{"level":"debug","timestamp":"2018-08-17T12:36:06.150Z","logger":"docker","caller":"docker/client.go:46","message":"Client version set to 1.22"}
{"level":"debug","timestamp":"2018-08-17T12:36:06.150Z","logger":"docker","caller":"docker/watcher.go:167","message":"Start docker containers scanner"}
{"level":"info","timestamp":"2018-08-17T12:36:06.150Z","caller":"instance/beat.go:275","message":"filebeat stopped."}
{"level":"error","timestamp":"2018-08-17T12:36:06.150Z","caller":"instance/beat.go:691","message":"Exiting: error initializing publisher: error initializing processors: Cannot connect to the Docker daemon at tcp://hostname:2375. Is the docker daemon running?"}
Exiting: error initializing publisher: error initializing processors: Cannot connect to the Docker daemon at tcp://hostname:2375. Is the docker daemon running?
filebeat exited with code 1