20scoops/filebeat repository overview

[x] Network (Database or Redis)

[x] AWS (EC2, S3)
[x] Docker
[x] Mongo
[x] Redis
[ ] Postgate
[ ] MySql

metricbeat.config.modules:
  path: ${path.config}/modules.d/*.yml

cloud.id: "20scoops-ELK:xxxxxxxxxxxxx=="
cloud.auth: "elastic:xxxxxxxxx"

fields_under_root: true
fields:
  project: secubik
  env: staging

 [x] Volume log file

#=========================== Filebeat inputs =============================
filebeat.inputs:
  - type: log
    enabled: true
    paths:
      - /usr/share/filebeat/logs/*.log
    json.keys_under_root: true
    json.message_key: message

#==================== Elasticsearch template setting ==========================
setup.template.name: "filebeat"
setup.template.pattern: "filebeat-*"

setup.ilm.enabled: auto
setup.ilm.rollover_alias: "filebeat-<==project==>"
setup.ilm.pattern: "{now/d}-000001"

#----------------------------- Cloud output --------------------------------
#output.console.pretty: true
output.elasticsearch:
  hosts: ["https://4fce183bd4f747dc9490f94654a6ec1b.eu-central-1.aws.cloud.es.io:9243"]
  index: "filebeat-<==project==>-%{[agent.version]}-%{+yyyy.MM.dd}"
  username: "elastic"
  password: "<==password==>"

#================================ Processors =====================================
processors:
  - add_host_metadata: ~
  - add_cloud_metadata: ~
  - add_docker_metadata:
      host: "unix:///var/run/docker.sock"

#================================ Logging =====================================
logging.level: info