We have Filebeat running on K8, collecting logs from multiple inputs on 2 namespaces.
I am now working with another team, which has applications also deployed to Kubernetes under a different namespace. We went ahead with the most obvious solution, which is to add filebeat inputs to the filebeat-kubernetes.yaml file.
My concern is we now have a single filebeat-kubernetes.yaml file that is increasing in size. It has 12 inputs and just had a 13th input added, which will surely be broken out into more inputs as the other team figures out the names of their log files being deposited into /var/log/containers/
by K8.
Is there a way to break down the single file into multiple files?