peterjozsa/filebeat-alpine repository overview

⁠Filebeat

Docker image based on Alpine linux with pre-installed filebeat.

⁠Configuration

A default filebeat.yml is included (/etc/filebeat/filebeat.yml) which sets default paths for configs and data.

⁠Prospectors

By default filebeat looks for prospector configurations under /etc/filebeat/prospectors.d path. Example:

- type: log
  paths:
    - /var/log/mysql.log
  scan_frequency: 10s

- type: log
  paths:
    - /var/log/apache.log
  scan_frequency: 5s

⁠Environment variables

⁠LOGSTASH_HOSTS

Logstash hosts which will be set up as outputs for Filebeat.

Example:

LOGSTASH_HOSTS="1.2.3.4:5044,5.6.7.8:5044"

⁠FILEBEAT_DROP_FILEDS

Drop the listed fields automatically

Example:

FILEBEAT_DROP_FILEDS="host"

⁠Volumes

The following folders should be persisted:

⁠Data

Filebeat stores here the status of each input file. Not keeping it persistent can lead to duplicate log entries after a container restart.

Path: /var/lib/filebeat