Filebeat missing container k8 metadata

When running batch of short-lived containers (which are same docker images), on some (random) occasions k8 metadata tags are missing from some of them
Also there are no errors on the Filebeat service itself when filebeat starts watching the files
We have following config:

    filebeat.inputs:
    - type: docker
      containers.ids:
      - '*'
      processors:
      - add_kubernetes_metadata: ~
     ...
     ...
     ...

Tested with Filebeat 7.6 and with latest 7.9, same issue persists
Running AKS (Azure) 1.17

Example screenshots:
Missing k8 metadata tags

And here are some with k8 metadata tags

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.