Hi everyone,
I am new to using elasticsearch
I have a problem with metricbeat specifically with the docker module
With the configuration as below I have renamed the index with the event.moudle field which will change the name to another index but, I am not getting any docker related index, I have enabled the moudle system and it works fine.
Can someone help me?
output.elasticsearch:
# Array of hosts to connect to.
hosts: ["10.10.1.13:9200"]
indices:
- index: "metricbeat-ipp-prod-worker1-metric-%{[agent.version]}-%{+yyyy.MM.dd}"
when.equals:
event.module: "system"
- index: "metricbeat-ipp-prod-worker1-docker-%{[agent.version]}-%{+yyyy.MM.dd}"
when.equals:
event.module: "docker"
# ======================= Elasticsearch template setting =======================#
setup.ilm.enabled: false #DISABLE Index managerment
setup.template.name: "metricbeat-ipp-prod-worker1"
setup.template.pattern: "metricbeat-ipp-prod-worker1-*"
setup.template.settings:
index.number_of_shards: 1
index.codec: best_compression
#_source.enabled: false