/docker-filebeat

Docker image containing Elastic Filebeat

Primary LanguageShell

Docker Filebeat image

This image contains filebeat so you can send logs from a server to Elasticsearch.

It's expecting some environment variables to know where is the ES instance: you must provide the ELASTICSEARCH_URL and ELASTICSEARCH_PORT.

Running the container

  • To start the container run with the default filebeat and template configuration:

    docker run -e "ELASTICSEARCH_URL=http://my-es.mydomain.com" -e "ELASTICSEARCH_PORT=9200" 
-e "PATH_GLOB=/var/log/" -d filebeats:5.2.2

  • If you want to overwrite the default filebeat or template configuration:

    docker run -e "ELASTICSEARCH_URL=http://my-es.mydomain.com" -e "ELASTICSEARCH_PORT=9200" 
-e "PATH_GLOB=/var/log/" -e "FILEBEAT_CONFIG_URL=http://cdn.mydomain.com/my-filebeat-config.yml" 
-e "FILEBEAT_TEMPLATE_URL=http://cdn.mydomain.com/my-filebeat-template.json" -d filebeats:5.2.2