Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision | |||
devops:deploy_elk_using_helm [2021/04/08 14:05] – [Kibana Ingress] admin | devops:deploy_elk_using_helm [2021/10/24 12:06] (current) – [Filebeat] admin | ||
---|---|---|---|
Line 396: | Line 396: | ||
output.logstash: | output.logstash: | ||
hosts: [" | hosts: [" | ||
+ | | ||
+ | ===== Filebeat Autodiscover ===== | ||
+ | У Filebeat есть отличный функцмонал - Autodiscover. Он позволяет по заданным правилам автоматически обнаруживать файлы с логами. Прмиер конфига для K8S: | ||
+ | < | ||
+ | filebeat: | ||
+ | autodiscover: | ||
+ | providers: | ||
+ | - node: ${HOSTNAME} | ||
+ | templates: | ||
+ | - config: | ||
+ | - containers: | ||
+ | ids: | ||
+ | - ${data.kubernetes.container.id} | ||
+ | paths: | ||
+ | - / | ||
+ | type: container | ||
+ | type: kubernetes | ||
+ | output: | ||
+ | elasticsearch: | ||
+ | hosts: | ||
+ | - https:// | ||
+ | password: 7hhjEqA6oH3049D1oTT9s4O2 | ||
+ | ssl: | ||
+ | certificate_authorities: | ||
+ | - / | ||
+ | username: elk-elk-beat-user | ||
+ | processors: | ||
+ | - drop_fields: | ||
+ | fields: | ||
+ | - log | ||
+ | - container.id | ||
+ | - container.runtime | ||
+ | - container.image.name | ||
+ | - input.type | ||
+ | - tags | ||
+ | - kubernetes.labels | ||
+ | - kubernetes.pod.uid | ||
+ | - kubernetes.replicaset.name | ||
+ | - kubernetes.node | ||
+ | - kubernetes.namespace_labels | ||
+ | - kubernetes.namespace_uid | ||
+ | - ecs.version | ||
+ | - agent | ||
+ | ignore_missing: | ||
+ | setup: | ||
+ | dashboards: | ||
+ | enabled: true | ||
+ | kibana: | ||
+ | host: http:// | ||
+ | password: 6l2IPFK8mBR88w6ek49ePI71 | ||
+ | username: elk-elk-beat-kb-user | ||
+ | </ | ||
+ | Этот конфиг сформирован оператором **ECK 1.8**. \\ | ||
+ | Что делать, | ||
+ | < | ||
+ | ... | ||
+ | 2021-10-24T11: | ||
+ | 2021-10-24T11: | ||
+ | 2021-10-24T11: | ||
+ | 2021-10-24T11: | ||
+ | 2021-10-24T11: | ||
+ | 2021-10-24T11: | ||
+ | 2021-10-24T11: | ||
+ | ... | ||
+ | </ | ||
+ | Однако, | ||
+ | < | ||
+ | ... | ||
+ | 2021-10-24T11: | ||
+ | 2021-10-24T11: | ||
+ | 2021-10-24T11: | ||
+ | 2021-10-24T11: | ||
+ | ... | ||
+ | </ | ||
+ | sudo hostnamectl set-hostname `echo " | ||
+ | то есть переменовал хосты | ||
+ | | ||
====== Настройка безопасности ====== | ====== Настройка безопасности ====== |