Using AutoDiscover feature for Docker does not work when running in Swarm mode

Elastic Stack Beats
3

Hi @exekias,

Correct, on the labels; these are the labels as they are added by Docker Swarm.
Good to hear that this was recently fixed, for the record though - this issue can be reproduced on a single swarm node/single filebeat instance. The value of the label 'com.docker.swarm.task' always triggers this errors.

I have implemented your suggested workaround; which as expected resolves the issue.
Minor note for others who might read this, it should be:

processors:
  - drop_fields:
      fields:
        - "docker.containers.labels"

(fields should be indented from drop_fields).

Thanks for your help.

1 Like