Coralogix & filebeat integration for o365 Logs

filebeat-configmap.yaml

---
apiVersion: v1
kind: ConfigMap
metadata:
  name: filebeat-configmap
  namespace: kube-system
  labels:
    k8s-app: filebeat
data:
  filebeat.yml: |-
    filebeat.config:
      modules:
        path: ${path.config}/modules.d/*.yml
        reload.enabled: false
    processors:
        - drop_fields:
            fields: ["input", "beat_host", "ecs", "agent", "tags", "offset"]
            ignore_missing: true
    fields_under_root: true
    fields:
      PRIVATE_KEY: "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
      COMPANY_ID: XXXXX
      APP_NAME: "XXXXX"
      SUB_SYSTEM: "XXXXXXX"
    output.logstash:
      enabled: true
      hosts: ["logstashserver.coralogix.com:5044"]
      max_retries: 5
      timeout: 60s
      backoff.max: 120s