I'm doing my first tests with packetbeat.
I wanted to monitor a microservice (basically http codes of responses, latency, size of responses) but it has been impossible so far.
The service listens on a specific port. I change the configuration to include this port:
- type: http
Configure the ports where to listen for HTTP traffic. You can disable
the HTTP protocol by commenting out the list of ports.ports: [80, 8080, 8000, 5000, 8002, MYPORT]
but I do not see any information in ES related to the activity of my service.
My questions in this regard are:
. Is packetbeat the right option for this requirement? Or should I try with another component of the stack?
. What configuration change should I make in order to audit the traffic of my service?
. What configuration change should I make in order to audit ONLY the traffic of my service?
Thanks in advance