Hello,
I'm running filebeat 7.6.2 on AKS with the following configuration:
filebeatConfig:
filebeat.yml: |
filebeat.autodiscover:
providers:
- type: kubernetes
hints.enabled: false
templates:
- condition:
or:
- equals:
kubernetes.namespace: stage
- equals:
kubernetes.namespace: prod
config:
- type: container
paths:
- /var/lib/docker/containers/${data.kubernetes.container.id}/${data.kubernetes.container.id}-json.log
multiline.pattern: '^[[:space:]]'
multiline.negate: false
multiline.match: after
exclude_lines: ['^.+status":"20.".+path":"\/tenancy\/.+\/authorize.+$','.+200.+(POST|GET).+\/tenancy\/external\/(authorize|resource).+$']
processors:
- add_cloud_metadata: ~
- add_kubernetes_metadata:
in_cluster: true
- drop_event:
when:
or:
- equals:
kubernetes.container.name: "filebeat"
- equals:
kubernetes.container.name: "filebeat7"
- equals:
kubernetes.container.name: "logstash"
output.console:
pretty: true
logging.to_files: true
logging.level: info
logging.files:
path: /var/log/filebeat
name: filebeat
rotateeverybytes: 10485760 # = 10MB
keepfiles: 7
All modules are disabled.
Getting the following error in filebeat log:
> 2020-04-26T08:52:01.056Z ERROR [autodiscover] cfgfile/list.go:96 Error creating runner from config: each input must have at least one path defined
> 2020-04-26T08:52:01.056Z ERROR [autodiscover] cfgfile/list.go:96 Error creating runner from config: No paths were defined for input accessing config
> 2020-04-26T08:52:01.057Z ERROR [autodiscover] cfgfile/list.go:96 Error creating runner from config: each input must have at least one path defined
> 2020-04-26T08:52:01.057Z ERROR [autodiscover] cfgfile/list.go:96 Error creating runner from config: each input must have at least one path defined