I am trying to use something that should be straightforward:
beat -> logstash -> elasticsearch -> kibana.
Few config parameters and I believe it should be fine... but hwres' the catch... I just can't get my beat to forward its info to anyone. In order to get rid of an unknow... I removed logstash from the equation from now so trying to send to ES... but I just can't have it working. I tried different config files from others and I still get errors.. could you please help me out?
I am using the defaults in most things... so I would not expect issues... (When I run the following yaml file... it complains about the following: Exiting: error unpacking config data: more than one namespace configured accessing 'output' (source:'filebeat.yml')" How can that be?.. I have no idea since the file is so simple....
iAlso, if I use the output.file below... it just doesn't work... I see the output of beat in /var/lib/filebeat which is a default... but how come I cannot override it (again.. that was purely as a testing purpose since my goal is to send to ES or logstash)?
**** command line used to install the kubernetes pod *************
helm install --name filebeat stable/filebeat -f filebeat_values.yaml
**************** my filebeat_values.yaml file *******************
# Reload prospectors configs as they change:
# Reload module configs as they change:
- type: log
- type: docker
#Array of hosts to connect to.
#When a key contains a period, use this format for setting values on the command line:
#Upload index template to Elasticsearch if Logstash output is enabled
#List of Elasticsearch hosts
#List of beat plugins
#pass custom command. This is equivalent of Entrypoint in docker
#pass custom args. This is equivalent of Cmd in docker
#A list of additional environment variables
#Add additional volumes and mounts, for example to read other log files on the host
#- operator: Exists
#Specifies whether RBAC resources should be created
#Specifies whether a ServiceAccount should be created
#The name of the ServiceAccount to use.
#If not set and create is true, a name is generated using the fullname template