![]() You can usually find them in /var/lib/docker/containers but that may depends on your docker installation. We will see in the next section what to put in this file.įileBeat also needs to have access to the docker log files. To share this configuration file with the container, we need a read-only volume /usr/share/filebeat/filebeat.yml:ro. Kibana does not need a volume as it uses ElasticSearch to persist its configuration.įileBeat on the other hand needs a specific configuration file to achieve what we want. ElasticSearch has a volume to keep its data. They are respectively available on port 92. ![]() There is not much to say about ElasticSearch and Kibana as it is a very standard configuration for docker. Note that you need to replace /MY_WORKDIR/ by a valid path on your computer for this to work. The docker compose file docker-compose.yml looks like this: We will use the official docker images and there will be a single ElasticSearch node. To make things as simple as possible, we will use docker compose to set them up. There are many ways to install FileBeat, ElasticSearch and Kibana. Although FileBeat is simpler than Logstash, you can still do a lot of things with it. It was created because Logstash requires a JVM and tends to consume a lot of resources. The setup works as shown in the following diagram:ĭocker writes the container logs in files.įileBeat then reads those files and transfer the logs into ElasticSearch.įileBeat is used as a replacement for Logstash.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |