Filebeat is reading some docker container logs, but not all. I checked one of the log files that was being excluded and it has been updating recently but I can't see any information for that container in Kibana. There are also much fewer container logs available in Kibana than there are container log files.
filebeat.inputs: - type: docker combine_partial: true processors: - add_docker_metadata: ~ containers: path: "/var/lib/docker/containers" stream: "stdout" ids: - "*" # Change to true to enable this input configuration. enabled: true