Filebeat not able to find logs on microk8

Elastic Stack Beats
,
1

Hi,

I'm struggling to configure a filebeat container to be able to read logs from containers running on a kubernetes microK8 instance.

On microk8, logs are stored directly in /var/log/containers:

# ls /var/log/containers
<pod1-name>_<namespace>_<container-name>-<container_id>.log
<pod2-name>_<namespace>_<container-name>-<container_id>.log
...

I have set up the containers.path directive to point to that folder but nothing is loaded. In the filebeat logs I have the following when it starts:

2019-05-21T13:08:41.291Z	INFO	log/input.go:138	Configured paths: [/var/log/containers/*/*.log]

Does someone know how I can configure the filebeat input to detect those files?

Thank you in advance.

2

Hello looking at your ls output, I think the right path would be:

/var/log/containers/*.log
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.