filebeat-generic

Filebeat container, alternative to fluentd used to ship logs.

Getting Started

This container is designed to ship logs to Redis for further processing. You can provide following environment variables to customize it.

REDIS_HOST=example.com:6379
LOG_LEVEL=info  # log level for filebeat. Defaults to "error".
REDIS_PASSWORD=securepassword  # Optional, Redis password
PATHS="/var/log/containers/*/*.log,/var/log/docker/containers/*/*.log,/var/lib/docker/containers/*/*.log,/var/log/*/*.log"

Check out the docker-compose.prod.yml and see what folders need to be mounted so filebeat can tail the files and send the logs.

Filebeat parses docker json logs and applies multiline filter on the node before pushing logs to logstash.

Make sure you add a filter in your logstash configuration if you want to process the actual log lines.

Licence

This project is licensed under the MIT License. Refer LICENSE for details.