From 2bcffed2d7f89fd8f34900a1c752f2c9bbb1eb41 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?G=C3=B6rz=2C=20Friedrich?= <friedrich.goerz@tolina.local>
Date: Wed, 26 Oct 2022 16:22:36 +0000
Subject: [PATCH] DEV-650: added config stuff to drop docker.container.label to
 avoid crashing...

---
 templates/filebeat/config/filebeat.yml.j2 | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/templates/filebeat/config/filebeat.yml.j2 b/templates/filebeat/config/filebeat.yml.j2
index 17dae83..0101221 100644
--- a/templates/filebeat/config/filebeat.yml.j2
+++ b/templates/filebeat/config/filebeat.yml.j2
@@ -61,6 +61,14 @@ fields:
   stage: {{ stage }}
   hostname: {{ inventory_hostname }}
 
+# DEV-650
+# avoiding container labels with [] crashing logstash
+processors:
+  - drop_fields:
+      fields:
+        - docker.container.labels
+      ignore_missing: yes
+
 output.logstash:
   hosts: ["{{ shared_service_elastic_stack_logstash_01_hostname }}:5044"]
   ssl: