Im looking into setting up functionbeat to ship aws cloudwatch logs to elasticsearch. Ive been looking at the following documentation to setup functionbeat https://www.elastic.co/guide/en/beats/functionbeat/current
From what i understand ECK does not support this beat https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-beat.html. Im not sure it will as it seems completely separate from Kubernetes. What is your take on this?
However there is a section in the functionbeat configuration where i need to point to my elasticsearch cluster on port 9200. How should i deal with this given that my elasticsearch cluster is within kubernetes.
output.elasticsearch: hosts: ["myEShost:9200"] username: "filebeat_internal" password: "YOUR_PASSWORD" setup.kibana: host: "mykibanahost:5601" username: "my_kibana_user" password: "YOUR_PASSWORD"
Is this as simple as exposing my elasticsearch service on port 9200 publicly via loadbalancer? Right now ive only exposed kibana publicly.