Hi, I'm having issues passing logs to logstash from filebeat.
Filebeat version: 6.3.2
filebeat.yml: |-
logging.level: ${LOG_LEVEL}
filebeat.autodiscover:
providers:
- type: kubernetes
in_cluster: true
templates:
- condition:
or:
- equals:
kubernetes.namespace: development
- equals:
kubernetes.namespace: sqa
- equals:
kubernetes.namespace: test
- equals:
kubernetes.namespace: stage
config:
- type: docker
containers.ids:
- "${data.kubernetes.container.id}"
multiline.pattern: '^[[:space:]]'
multiline.negate: false
multiline.match: after
output.logstash:
hosts: ['${LOGSTASH_HOSTS}']
kubernetes.yaml based on filebeat-autodiscover-kubernetes.yaml
The pipeline worked fine when i specified providers docker type, so I know data should pass to logstash.
I could use some help setting up correct debug flags in kubernetes manifest also!
Thanks.