added system module to collect from host nodes

fxcebx · May 3, 2018 · 64b9565 · 64b9565
1 parent d9007ef
commit 64b9565
Showing 1 changed file with 18 additions and 3 deletions.
diff --git a/MonitoringKubernetes/filebeat-kubernetes.yaml b/MonitoringKubernetes/filebeat-kubernetes.yaml
@@ -15,6 +15,15 @@ data:
     setup.template.settings:
       index.number_of_shards: 1
 
+    filebeat.modules:
+      - module: system
+        syslog:
+          enabled: true
+          #var.paths: ["/var/log/syslog"]
+        auth:
+          enabled: true
+          #var.paths: ["/var/log/authlog"]
+
     filebeat.autodiscover:
       providers:
         - type: kubernetes
@@ -74,9 +83,9 @@ data:
                           message: '^\d+\.\d+\.\d+\.\d+ '
                   - equals:
                       fileset.name: access
-      - add_cloud_metadata:
-      - add_kubernetes_metadata:
-      - add_docker_metadata:
+      #- add_cloud_metadata:
+      #- add_kubernetes_metadata:
+      #- add_docker_metadata:
 
     cloud.auth: elastic:${ELASTIC_PASSWORD}
     cloud.id: ${CLOUD_ID}
@@ -129,6 +138,9 @@ spec:
           subPath: filebeat.yml
         - name: data
           mountPath: /usr/share/filebeat/data
+        - name: varlog
+          mountPath: /var/log
+          readOnly: true
         - name: varlibdockercontainers
           mountPath: /var/lib/docker/containers
           readOnly: true
@@ -139,6 +151,9 @@ spec:
         configMap:
           defaultMode: 0600
           name: filebeat-dynamic-config
+      - name: varlog
+        hostPath:
+          path: /var/log
       - name: varlibdockercontainers
         hostPath:
           path: /var/lib/docker/containers