linuxspace/filebeat repository overview

⁠Docker image for Elastic Filebeat

Filebeat - lightweight shipper for logs.

Filebeat⁠ is part of the Elastic Stack, meaning it works seamlessly with Logstash,
Elasticsearch, and Kibana, also known as The Open Source Elastic Stack⁠.

Filebeat version is 5.4.3 that is most recent version in Jul 2017.

The Filebeat docker conatiner built on top of:

• Ubuntu 16:04
• Dockerfile
• Entrypoint script
• filebeat.yml
• tini
• docker-compose (TO DO)

Dockerfile - config file to create Docker conatiner.
executor.sh - entrypoint script for Docker conatiner.
filebeat.yml - configuration file for Filebeat.
tini - valid init for containers.
docker-compose.yml - configuration file for Docker Compose.

⁠Usage

The image is available on Docker Hub and can be pulled with:
docker pull linuxspace/filebeat

The container can be executed with:
docker container run --restart on-failure --name=filebeat -d -v /var/log/my_logs:/var/log/nginx linuxspace/filebeat

Explanation: For example your web appplication stores its logs to /var/log/my_logs,
you need to mount this directory to filebeat container.

If you want to build container by yourself: docker build -t mystaff/filebeat .

⁠Filebeat configuration

filebeat.yml - file is carefully adited.
There's example of sending Nginx access.log and error.log to remote Redis host.

In filebeat.yml you can find example of configuration to send logs to:

• Elasticsearch
• Logstash
• Redis

ec2-64-89-134-148.us-west-1.compute.amazonaws.com - isn't real host. It's only example!

⁠Links

Link to Github repository: https://github.com/junoteam/filebeat-docker.git⁠