Filebeat to send containers logs


(andrea) #1

Hello,
I need to configure Filebeat tp send containers logs to Elasticsearch. Does anybody know how to do that?
I guess I just need to forward STDOUT to Elasticsearch, but I can't figure out how to do it.

Thanks!


(Monica Sarbu) #2

If you are using Docker containers, there are a few options how you can get the container logs. Please check the slides for more details with advantages and disadvantages of each option. No matter of what option you use, you need to install Filebeat in a separate Docker container on the same host as your Docker containers.
The easyest option would be to use the json logging driver (the default in Docker) and then Filebeat with json enabled.


(system) #3

This topic was automatically closed after 21 days. New replies are no longer allowed.