pontostroy/journalbeat repository overview

docker run -it --network=host --volume=/var/log/journal:/var/log/journal --volume=/run/log/journal:/run/log/journal --volume=$(pwd)/data:/data  --volume=/etc/machine-id:/etc/machine-id:ro --volume=$(pwd)/journalbeat.yml:/journalbeat.yml  pontostroy/journalbeat

docker run -it --network=host --volume=/var/log/journal:/var/log/journal --volume=/run/log/journal:/run/log/journal --volume=/etc/machine-id:/etc/machine-id:ro --volume=/tmp/journalbeat.yml:/journalbeat.yml pontostroy/journalbeat

docker run -it --network=host --volume=/var/log/journal:/var/log/journal --volume=/run/log/journal:/run/log/journal --volume=/etc/machine-id:/etc/machine-id:ro pontostroy/journalbeat

tags: [ "beat"]
journalbeat:
  write_cursor_state: true 
  cursor_state_file: /data/journalbeat-cursor-state
  pending_queue.file: /data/journalbeat-pending-queue
  flush_cursor_secs: 5s
  seek_position: cursor
  cursor_seek_fallback: tail
  clean_field_names: false
  convert_to_numbers: false
  kernel: true
  processors:
- drop_fields:
    fields: ["host", "host.name"]
output:
  console:
     enable: true
     pretty: true
logging.metrics.enabled: false
logging.metrics.period: 10s
logging.to_syslog: false
fields_under_root: true
fields:
    type: journalbeat
http.enabled: true
http.host: localhost
http.port: 5066