DEV-630 added support for elk to PaaS

host_vars/dev-devops-iaas-01.yml

@@ -0,0 +1,3 @@
+---
+
+pass_tenant_id: "devops"

host_vars/prodnso-platform-iaas-01.yml

@@ -1,5 +1,7 @@
 ---
 
+pass_tenant_id: "plattform"
+
 hetzner_server_type: cpx41
 
 default_plattform_users:

templates/filebeat/config/filebeat.yml.j2

@@ -60,6 +60,9 @@ filebeat.autodiscover:
 fields:
   stage: {{ stage }}
   hostname: {{ inventory_hostname }}
+{% if pass_tenant_id is defined | default(false) %}
+  pass_tenant_id: {{ pass_tenant_id }}
+{% endif %}
 
 # reducing network traffic by removing unused fields 
 # avoiding docker.container.labels with [] crashing logstash

templates/logstash/config/logstash/pipeline/filebeat.conf.j2

@@ -201,6 +201,18 @@ output {
            }
         }
     }
+    else if [fields][pass_tenant_id] and [container][name] and [@metadata][beat] {
+        elasticsearch {
+            hosts => ["https://{{ shared_service_elastic_stack_01_hostname }}:{{ service_port_elasticsearch }}"]
+            cacert => "/usr/share/logstash/config/certificates/ca/ca.crt"
+            user => "{{ elastic_admin_username }}"
+            password => "{{ elastic_admin_password }}"
+
+            index => "%{[fields][stage]}-%{[fields][pass_tenant_id]}-%{[container][name]}-%{+YYYY.MM}"
+
+            manage_template => false
+       }
+    }
     else if [container][name] and [@metadata][beat] {
         elasticsearch {
             hosts => ["https://{{ shared_service_elastic_stack_01_hostname }}:{{ service_port_elasticsearch }}"]