log-pilot
log-pilot copied to clipboard
Collect logs for docker containers
例如index名称为 business_log-*,是包含下划线的,用k8s yaml的env来设置index与路径的关系时,我使用:aliyun_logs_business_log,如下: apiVersion: v1 kind: Pod metadata: name: tomcat spec: containers: - name: tomcat image: "tomcat:7.0.106" env: - name: aliyun_logs_business_log value: "/usr/local/tomcat/logs/catalina.*.log" # 容器内文件日志路径需要配置emptyDir。 volumeMounts: - name: tomcat-log mountPath:...
我替换的是filebeat 7.6.1,我在pod中也添加了环境变量,但是所有的内容都输出到了同一个索引里面 这是自动生成的配置文件 `path.config: /etc/filebeat path.logs: /var/log/filebeat path.data: /var/lib/filebeat/data filebeat.registry.path: /var/lib/filebeat/registry filebeat.shutdown_timeout: 0 logging.level: info logging.metrics.enabled: false logging.files.rotateeverybytes: 104857600 logging.files.keepfiles: 10 logging.files.permissions: 0600 setup.template.name: "filebeat" setup.template.pattern: "filebeat-*" filebeat.config: inputs: enabled:...
使用的是filebeat0.9.7 fail to process event: {start 48e5d25f20393a4c02996704d2b7b9fbe55f7925e5f2010c79e4cde6d4d4ca89 10.131.9.15:5000/elk-cluster/elasticsearch6.5.4@sha256:87a0131ea8ba1cac63604953161bceae6fcfd66de291b17753eb2ac381b601c3 container start {48e5d25f20393a4c02996704d2b7b9fbe55f7925e5f2010c79e4cde6d4d4ca89 map[image:10.131.9.15:5000/elk-cluster/elasticsearch6.5.4@sha256:87a0131ea8ba1cac63604953161bceae6fcfd66de291b17753eb2ac381b601c3 io.kubernetes.sandbox.id:5694a8705721959483a7898ecf41016aa57e46e3f3ab2b495138a64381e7e5e6 license:Elastic License org.label-schema.schema-version:1.0 annotation.io.kubernetes.container.hash:c5392e32 annotation.io.kubernetes.container.restartCount:0 annotation.io.kubernetes.container.terminationMessagePath:/dev/termination-log org.label-schema.version:6.5.4 io.kubernetes.container.logpath:/var/log/pods/17da8484-5b8d-11ea-a98d-005056b4b5ae/test/0.log io.kubernetes.pod.name:elk-cluster-test-7475679577-v8q9x org.label-schema.build-date:20181205 io.kubernetes.pod.uid:17da8484-5b8d-11ea-a98d-005056b4b5ae name:k8s_test_elk-cluster-test-7475679577-v8q9x_default_17da8484-5b8d-11ea-a98d-005056b4b5ae_0 org.label-schema.name:elasticsearch io.kubernetes.container.name:test io.kubernetes.docker.type:container io.kubernetes.pod.namespace:default org.label-schema.url:https://www.elastic.co/products/elasticsearch...
2019-08-20T08:10:28Z INFO Connected to Elasticsearch version 7.2.0 2019-08-20T08:10:28Z INFO Loading template for Elasticsearch version: 7.2.0 2019-08-20T08:10:36Z ERR Failed to connect: Connection marked as failed because the onConnect callback failed: Error...
自己更新filebeat版本打包好像不行,请问有计划升级7.x吗
部署在k8s中,通过lsof |grep deleted发现存在大量的log文件占用
现在只支持docker,但很多平台已经更换为其他容器运行时,如CRI-O,是否考虑支持更多的运行时?
请教**KAFKA_VERSION** 可以指定那些版本或者说当前最新版本_log-pilot_支持哪些版本的_kafka_呢? 是否支持最新的稳定版本:**kafka_2.11-0.10.1.1** ?
"Log-pilot默认采集日志到ES集群时会自动创建格式为index-yyyy.MM.dd的索引" 但是新创建的索引是在北京时区的八点(UTC时区的0点)创建的;即@timestamp字段上北京时区不一致。这种默认的采集方式改如何调整呢?
hi, Is there any plan or have done something for multi arch for log-pilot for example support arm64? It would be nice if some instructions offered.