filebeat.config: prospectors: path: ${path.config}/prospectors.d/*.yml reload.enabled: true modules: path: ${path.config}/modules.d/*.yml reload.enabled: false filebeat.inputs: - type: log enabled: true paths: - ${INPUT_PATH:/volume/*.log} fields: project-name: ${PROJECT_NAME:unown} multiline: pattern: '^\[' negate: true match: after max_lines: 200 ignore_older: 168h tail_files: true processors: - add_cloud_metadata: output.elasticsearch: hosts: ["127.0.0.1:9200"] username: "${ES_NAME:elastic}" password: "${ES_PASS:changeme}" index: "${INDEX_NAME:filebeat}-%{+yyyy.MM.dd}" timeout: 180 backoff.max: 120 # kibanan setup setup.kibana: host: "127.0.0.1:5601" username: "${ES_USERNAME:elastic}" password: "${ES_PASS:changeme}" setup: template: enabled: true name: "${INDEX_NAME:filebeat}" pattern: "${INDEX_NAME:filebeat}-*" # enable dashboards setup.dashboards.enabled: true setup.dashboards.index: "${INDEX_NAME:filebeat}-*" setup.dashboards.retry.enabled: true setup.dashboards.retry.interval: 3 setup.dashboards.retry.maximum: 20