Structured logging (json) via Kubernetes hinted autodiscover

Elastic Stack Beats
1

I am using autodiscovery with hints in Kubernetes.

Many of my containers log with single JSON per-line structured logging as described @ https://www.elastic.co/blog/structured-logging-filebeat.

However, looking at the hints documentation @ https://www.elastic.co/guide/en/beats/filebeat/6.4/configuration-autodiscover-hints.html, I don't see the right hint to tell filebeat to parse the container logs as JSON-per-line.

How do I do this?

2

At the moment not all input settings are exposed via annotations.
If you need to set up some configuration not available via hints or modules, you can use the co.elastic.logs/raw annotation, that allows to define inline a whole input or module.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.