Skip to content

Instantly share code, notes, and snippets.

@bornatalebi
Last active November 16, 2020 08:10
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save bornatalebi/f49bc7608d92e05c280750a32b1ae98a to your computer and use it in GitHub Desktop.
Save bornatalebi/f49bc7608d92e05c280750a32b1ae98a to your computer and use it in GitHub Desktop.
filebeat.inputs:
- type: log
enabled: true
paths:
- /var/log/*.log
#- c:\programdata\elasticsearch\logs\*
- type: syslog
protocol.udp:
host: "node-1:515"
filebeat.config.modules:
path: ${path.config}/modules.d/*.yml
reload.enabled: false
#reload.period: 10s
setup.template.settings:
index.number_of_shards: 2
setup.kibana:
host: "kibana:5601"
setup.ilm.enabled: false
output.elasticsearch:
hosts: ["node-1:9200"]
index: "filebeat-%{[agent.version]}-%{+yyyy.ww}"
indices:
- index: "mikrotik-log-%{+yyyy.MM}"
when.contains:
log.source.address: "XXXXXXXXXX"
protocol: "https"
# ssl.certificate: "/home/elastic/certificates/filebeat/filebeat.crt"
# ssl.key: "/home/elastic/certificates/filebeat/filebeat.key"
ssl.certificate_authorities: "/home/user/cluster-node-10-final/ca/ca.crt"
username: "elastic"
password: "${ES_PWD}"
pipeline: geoip-info
pipelines:
- pipeline: "ciscosbeatspipeline"
when.contains:
event.module: "cisco"
setup.template.name: "filebeat-%{[agent.version]}"
setup.template.pattern: "filebeat-%{[agent.version]}-*"
processors:
- add_host_metadata: ~
- add_cloud_metadata: ~
- add_docker_metadata: ~
- add_kubernetes_metadata: ~
monitoring.enabled: true
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment