Fixes kubernetes metadata inclusion

thanks to https://discuss.elastic.co/t/kubernetes-metadata/90865/15
Yolean · Nov 4, 2017 · 504911a · 504911a
1 parent 52c28e8
commit 504911a
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/logs-streaming/filebeat-config.yml b/logs-streaming/filebeat-config.yml
@@ -10,15 +10,15 @@ data:
     - type: log
       enabled: true
       paths:
-        - /var/log/containers/*.log
-      # Logs say a lot of https://github.com/elastic/beats/blob/v6.0.0-rc2/filebeat/prospector/log/prospector.go#L250
+        - /var/lib/docker/containers/*/*.log
       symlinks: true
       # reduce the risk for aggregation recursion: match pod names to exclude own's logs + test logs
       exclude_files: ['^(.*\/)?logs-','^(.*\/)?test-']
 
     processors:
     - add_kubernetes_metadata:
         in_cluster: true
+        namespace: logs-kafka
 
     output.kafka:
       hosts: ["kafka-0.broker.kafka.svc.cluster.local:9092", "kafka-1.broker.kafka.svc.cluster.local:9092", "kafka-2.broker.kafka.svc.cluster.local:9092"]

diff --git a/logs-streaming/filebeat-logs-kube-kafka.yml b/logs-streaming/filebeat-logs-kube-kafka.yml
@@ -26,7 +26,7 @@ spec:
         - -c
         - /etc/filebeat/filebeat.yml
         - -d
-        - "service,beat"
+        - "service,beat,kubernetes"
         env:
         - name: TOPIC
           value: ops-kube-logs-filebeat-001