K8s filebeat

Elastic Stack Beats
1

Have deployed filebeat on kubernetes as per below link : https://www.elastic.co/guide/en/beats/filebeat/current/running-on-kubernetes.html

How to add grok patterns on the filebeat, we are using an external ELK..

since it is pushing logs directly to elastic search, how to apply log parsing /grok patterns.

2

Hi @Saravana_Kumar,

We recently released hints based autodiscover, with it you can make use of Filebeat modules to automatically configure your ingest pipelines. If your logs are not covered by a module, you will need to manually define your pipelines in Elasticsearch:

We are working on some other options, like defining your own dissect pattern as a hint, but that won't be available until 6.4.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.