Filebeat can not get kubernetes metadata for containerd run-time

Elastic In Your Native Tongue 中文提问与讨论
1

我使用的filebeat 7.16.2, Kubertnets 1.20.10 , 容器的运行时的版本为 v1.19.0, Filebeat 通过 DaemonSet方式部署， File beat采集部分配置如下：

    filebeat.inputs:
    - type: log
      paths:
        - /var/log/containers/*/*/*.log
      exclude_files: ["filebeat","kube","cattle-system","metallb-system"]
      fields_under_root: true
      multiline.pattern: '^\s'
      multiline.match: after
      tail_files: false
      clean_removed: true
      processors:
        - add_kubernetes_metadata:
            in_cluster: true
            kube_config:  /data/certs/kubeconfig

日志可以正常采集， 但是不能获取kuberentes的元数据， 如 namespace, pod name, labes ...
我需要如何配置

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.