# Filebeat 7.0.0 on docker with Autodiscover and deploy mode: global

**URL:** https://discuss.elastic.co/t/filebeat-7-0-0-on-docker-with-autodiscover-and-deploy-mode-global/179747
**Category:** Beats
**Tags:** docker, filebeat
**Created:** [May 6, 2019, 10:59am UTC](https://discuss.elastic.co/t/filebeat-7-0-0-on-docker-with-autodiscover-and-deploy-mode-global/179747 "2019-05-06T10:59:51Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![DieMal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/diemal/32/44229_2.png) [@DieMal](https://discuss.elastic.co/u/DieMal)
#### Post date: [May 6, 2019, 10:59am UTC](https://discuss.elastic.co/t/filebeat-7-0-0-on-docker-with-autodiscover-and-deploy-mode-global/179747/1 "2019-05-06T10:59:51Z")

</div>

Hi guys,  
I'm trying to deploy a stack to a swarm using autodiscover configuration for Filebeat service 7.0.0 ([https://www.elastic.co/guide/en/beats/filebeat/current/configuration-autodiscover.html](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-autodiscover.html)) , this is my filebeat.yml:

```
filebeat.autodiscover:
  providers:
    - type: docker
      labels.dedot: true
      templates:
        - condition:
            contains:
              docker.container.name: mystackname_
          config:
            - type: docker
              containers.ids:
                - "${data.docker.container.id}"
              exclude_lines: ["^\\s+[\\-`('.|_]"] # drop asciiart lines
setup.kibana:
host: "kibana-mon:5601"
output.logstash:
  hosts: ["logstash:5044"]
processors:
  - add_host_metadata: ~

```

My swarm consists of three nodes, 1 manager and 2 worker. When I deploy my docker-compose.yml

```
filebeat:
    image: DOCKER_REGISTRY:5000/filebeat-myimage:latest
    volumes:
        - /var/lib/docker/containers:/var/lib/docker/containers:ro
        - /var/run/docker.sock:/var/run/docker.sock:ro
    user: root
    deploy:
        mode: global
        restart_policy:
            condition: on-failure
            delay: 10s
            max_attempts: 5
    networks:
        - mynet

```

I'm observing that the Filebeat service starts only in the manager node and not in the worker nodes. How can deploy Filebeat (with autodiscover) in all node of my swarm ?

Note that I haven't any problem with Input type Log instead of Docker ([https://www.elastic.co/guide/en/beats/filebeat/current/configuration-filebeat-options.html](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-filebeat-options.html))

thanks for your help  
Diego

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 3, 2019, 11:13am UTC](https://discuss.elastic.co/t/filebeat-7-0-0-on-docker-with-autodiscover-and-deploy-mode-global/179747/2 "2019-06-03T11:13:15Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.