Is there ever a scenario where filebeat would log the contents of the files it is harvesting to standard out? I am shipping log files to elasticsearch with sensitive information and anything that is written to stdout it will get captured in cloudwatch, which I can't have happen.
How are you running filebeat? As a service, running the executable directly, container...? There are configs to output to stdout, but if your not running in debug mode, I dont think you should have an issue.
I am running filebeat in a docker container on Amazon ECS. I am using the base image docker.elastic.co/beats/filebeat:7.8.0.
Here is my config:
filebeat.inputs:
- type: log
enabled: true
paths:
- /usr/local/app/logs/django_out.log
close_inactive: 15000m
index: django_logs
setup.template:
name: "my-logs-template"
pattern: "my-logs-template-*"
setup.ilm.enabled: false
output.elasticsearch:
api_key: ${API_KEY}
hosts: ["${ELASTIC_HOST}"]
I don't see anything in ur config that would output sensitive info to stdout.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.