How to get more kubernetes metadata with filebeat

Elastic Stack Beats
1

Hi community

I'm collecting logs of my kubernetes cluster using this guide "the blog article of ELK 6.x ".

Using this method, I'm collecting many fields, like kubernetes.pod.name, kubernetes.annotations.abc, etc, it's really great!, But I would like to get more metadata fields, e.g. kubernetes.container.image, or whatever environment values of each container.

For this purpose. I didn't get usefully information of this url.
https://www.elastic.co/guide/en/beats/filebeat/master/add-kubernetes-metadata.html

Somebody know how to get it? some example for my filebeat.yml file?

Thanks!

2

Hi @jenciso,

Could you explain a little bit about how do you plan to use this data? Is it a hard requirement to have it attached to every log event?

Just for you to be aware, we also have a kubernetes module in Metricbeat, it retrieves this kind of info for monitoring.

Best regards

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.