Filebeat windows: add_docker_metadata from npipe

Elastic Stack Beats
1

When using filebeat 6.6.2 inside windows container I can't add docker metadata from npipe:

filebeat.yaml

filebeat.inputs:
- type: docker
  containers:
    path: "C:\\ContainerLogs"
    ids: "*"
  processors:
    - add_docker_metadata:
      host: ["npipe://./pipe/docker_engine"]

output.logstash:
  hosts: [${LOGSTASH_HOSTS}]
  ssl:
    certificate_authorities: ["C:\\ssl\\ca.crt"]
    certificate: "C:\\ssl\\tls.crt"
    key: "C:\\ssl\\tls.key"

logging.level: debug

Log:

ERROR   instance/beat.go:911    Exiting: Error in initing input: each processor needs to have exactly one action, but found 2 actions

I've tried different host syntax

  processors:
    - add_docker_metadata:
      host: ["npipe:////./pipe/docker_engine"]

but the same error

ERROR   instance/beat.go:911    Exiting: Error in initing input: each processor needs to have exactly one action, but found 2 actions

or these two

  processors:
    - add_docker_metadata:
      host: "npipe://./pipe/docker_engine"

and

  processors:
    - add_docker_metadata:
      host: "npipe:////./pipe/docker_engine"

with such error

 ERROR   instance/beat.go:911    Exiting: Error in initing input: required 'object', but found 'string' in field 'filebeat.inputs.0.processors.0.host' (source:'C:\Filebeat\filebeat.yml')

How can I add docker metadata properly from npipe?

2

The config indentation is incorrect.

host needs to be moved to the right by two spaces:

  processors:
    - add_docker_metadata:
        host: "npipe://./pipe/docker_engine"
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.