Regarding Filebeat and Kubernetes


#1

Hi,
I'm weighing using a filebeat daemonset for shipping logs output by docker and written to disk on kubernetes nodes.

Can I ask, is filebeat able to manage the logs on disk? That is, if the disk usage grows above a percentage remove the oldest logs? This is to account for possible outages downstream...

Regards,
D


(Noémi Ványi) #2

Filebeat is able to rotate its own log files. But rotating input files has to be done by an external tool right now. There is an open enhancement request on Github for this: https://github.com/elastic/beats/issues/7633
Feel free to add your use case to the issue, so when the feature is implemented your requirements can be taken account.