From 26dad106baccede37bb7c48888fc906db5ecc8b9 Mon Sep 17 00:00:00 2001 From: Sven Ketelsen Date: Wed, 18 May 2022 11:56:58 +0200 Subject: [PATCH] review: logstash index pattern - added block for [kubernetes][statefulset][name] --- .../config/logstash/pipeline/filebeat.conf.j2 | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/templates/logstash/config/logstash/pipeline/filebeat.conf.j2 b/templates/logstash/config/logstash/pipeline/filebeat.conf.j2 index 775eb4b..193e4cb 100644 --- a/templates/logstash/config/logstash/pipeline/filebeat.conf.j2 +++ b/templates/logstash/config/logstash/pipeline/filebeat.conf.j2 @@ -118,6 +118,18 @@ output { manage_template => false } } + else if [kubernetes][namespace] and [kubernetes][statefulset][name] { + elasticsearch { + hosts => ["https://{{ shared_service_elastic_stack_01_hostname }}:{{ service_port_elasticsearch }}"] + cacert => "/usr/share/logstash/config/certificates/ca/ca.crt" + user => "{{ elastic_admin_username }}" + password => "{{ elastic_admin_password }}" + + index => "%{[stage]}-%{[kubernetes][namespace]}-%{[kubernetes][statefulset][name]}-%{+YYYY.MM}" + + manage_template => false + } + } else if [kubernetes][namespace] { elasticsearch { hosts => ["https://{{ shared_service_elastic_stack_01_hostname }}:{{ service_port_elasticsearch }}"]