Filebeat Not Shipping Container logs from Kubernetes

[stephenb (Stephen Brown)]

@paolovalladolid

Next is to configure the index pattern that we need to use. Will report back.

You should look at this cool solution I just showed another .. .Or you will need to setup up all your custom templates, naming etc..etc.. which is fine but it is a lot of work.

Filebeat with multiple path and index

BTW you can also do this sending direct from Filebeat to Elasticsearch and you will still get all the benefits above that I mentioned. filebeat.inputs: - type: filestream id: my-filestream-id enabled: true paths: - /var/log/*.log fields_under_root: true fields: data_stream.type: logs data_stream.dataset: system_log data_stream.namespace: default setup.ilm.enabled: false setup.template.enabled: false # setup.template.settings: # index.number_of_shards: 1 setup.kiban…