k8s-filebeat配置

filebeat.config:

  modules:

    path: ${path.config}/modules.d/*.yml

    reload.enabled: false

filebeat.inputs:

- enabled: true

  paths:

  - /var/log/k8s_logs/*.log

  - /ct4/logs/*.log

  type: log

  multiline.pattern: '^\s*(\d{4}|\d{2})\-(\d{2}|[a-zA-Z]{3})\-(\d{2}|\d{4})'

  multiline.negate: true

  multiline.match: after

http.enabled: true

http.port: 5066

output.elasticsearch:

  hosts: ["192.168.1.37:9201"]

processors:

- add_cloud_metadata: null