Running the Filebeat Container - Docker

I am reading the docs with respect to spinning up a Filebeat container and I am confused with these two --volume mounts:


Currently I have this: --volume ./logs:/var/log only, because I am reading from a text file (setup in the yml file), but soon I will be using Autodiscover so I imagine I wont need this volume mount? However, will I need the two volume mounts above?

What is also throwing me is the :ro at the end of the two volume mounts above. Can someone please explain.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.