Filebeat journald not collecting logs

Elastic Stack Beats
,
1

Hi, I've configured a 8.10.2 stack running in docker containers on an Ubuntu 22.04.
Collecting logs from docker logs works fine. I now want to collect logs from journald instead, but I don't get anything collected. Is there specific configuration or volume to mount in order to get it working out of the box?

My filebeat input config is the following:

filebeat.inputs:
  - type: journald
    id: everything
    transports:
      - journal
    seek: cursor
    cursor_seek_fallback: tail
2

I found posts explaining why it doesn't work (versions of systemd incompatible between host and container). I'm therefore moving to another option than journald.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.