I am reading the docs with respect to spinning up a Filebeat container and I am confused with these two --volume mounts:
--volume="/var/lib/docker/containers:/var/lib/docker/containers:ro"
--volume="/var/run/docker.sock:/var/run/docker.sock:ro"
Currently I have this: --volume ./logs:/var/log only, because I am reading from a text file (setup in the yml file), but soon I will be using Autodiscover so I imagine I wont need this volume mount? However, will I need the two volume mounts above?
What is also throwing me is the :ro at the end of the two volume mounts above. Can someone please explain.