Skip to content

Instantly share code, notes, and snippets.

@stuartnelson3
Created August 3, 2021 10:26
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save stuartnelson3/6ea965312e5c2aa9a8da8b937b7be48e to your computer and use it in GitHub Desktop.
Save stuartnelson3/6ea965312e5c2aa9a8da8b937b7be48e to your computer and use it in GitHub Desktop.
example elastic-agent config file
id: bd9ca420-f0ad-11eb-82bc-a1d739a667fe
revision: 1
outputs:
default:
type: elasticsearch
hosts:
- 'http://localhost:9200'
username: admin
password: changeme
output_permissions:
default:
apm-1:
indices:
- names:
- metrics-apm.app.*-default
privileges:
- auto_configure
- create_doc
- names:
- logs-apm.error-default
privileges:
- auto_configure
- create_doc
- names:
- metrics-apm.internal-default
privileges:
- auto_configure
- create_doc
- names:
- metrics-apm.profiling-default
privileges:
- auto_configure
- create_doc
- names:
- traces-sampled-default
privileges:
- auto_configure
- create_doc
- names:
- traces-apm-default
privileges:
- auto_configure
- create_doc
system-1:
indices:
- names:
- logs-system.auth-default
privileges:
- auto_configure
- create_doc
- names:
- logs-system.syslog-default
privileges:
- auto_configure
- create_doc
- names:
- logs-system.application-default
privileges:
- auto_configure
- create_doc
- names:
- logs-system.security-default
privileges:
- auto_configure
- create_doc
- names:
- logs-system.system-default
privileges:
- auto_configure
- create_doc
- names:
- metrics-system.cpu-default
privileges:
- auto_configure
- create_doc
- names:
- metrics-system.diskio-default
privileges:
- auto_configure
- create_doc
- names:
- metrics-system.filesystem-default
privileges:
- auto_configure
- create_doc
- names:
- metrics-system.fsstat-default
privileges:
- auto_configure
- create_doc
- names:
- metrics-system.load-default
privileges:
- auto_configure
- create_doc
- names:
- metrics-system.memory-default
privileges:
- auto_configure
- create_doc
- names:
- metrics-system.network-default
privileges:
- auto_configure
- create_doc
- names:
- metrics-system.process-default
privileges:
- auto_configure
- create_doc
- names:
- metrics-system.process.summary-default
privileges:
- auto_configure
- create_doc
- names:
- metrics-system.socket_summary-default
privileges:
- auto_configure
- create_doc
- names:
- metrics-system.uptime-default
privileges:
- auto_configure
- create_doc
_elastic_agent_checks:
cluster:
- monitor
indices:
- names:
- logs-elastic_agent-default
- logs-elastic_agent.elastic_agent-default
- logs-elastic_agent.apm_server-default
- logs-elastic_agent.filebeat-default
- logs-elastic_agent.fleet_server-default
- logs-elastic_agent.metricbeat-default
- logs-elastic_agent.osquerybeat-default
- logs-elastic_agent.packetbeat-default
- logs-elastic_agent.endpoint_security-default
- logs-elastic_agent.auditbeat-default
- metrics-elastic_agent-default
- metrics-elastic_agent.elastic_agent-default
- metrics-elastic_agent.apm_server-default
- metrics-elastic_agent.filebeat-default
- metrics-elastic_agent.fleet_server-default
- metrics-elastic_agent.metricbeat-default
- metrics-elastic_agent.osquerybeat-default
- metrics-elastic_agent.packetbeat-default
- metrics-elastic_agent.endpoint_security-default
- metrics-elastic_agent.auditbeat-default
privileges:
- auto_configure
- create_doc
agent:
monitoring:
enabled: true
use_output: default
namespace: default
logs: true
metrics: true
http:
enabled: true
host: localhost
port: 6791
inputs:
- id: 3da1958d-2de9-4797-9659-b734665063fc
name: system-1
revision: 1
type: logfile
use_output: default
meta:
package:
name: system
version: 1.0.0
data_stream:
namespace: default
streams:
- id: logfile-system.auth-3da1958d-2de9-4797-9659-b734665063fc
data_stream:
dataset: system.auth
type: logs
paths:
- /var/log/auth.log*
- /var/log/secure*
exclude_files:
- .gz$
multiline:
pattern: ^\s
match: after
processors:
- add_locale: null
- add_fields:
target: ''
fields:
ecs.version: 1.9.0
- id: logfile-system.syslog-3da1958d-2de9-4797-9659-b734665063fc
data_stream:
dataset: system.syslog
type: logs
paths:
- /var/log/messages*
- /var/log/syslog*
exclude_files:
- .gz$
multiline:
pattern: ^\s
match: after
processors:
- add_locale: null
- add_fields:
target: ''
fields:
ecs.version: 1.9.0
- id: 3da1958d-2de9-4797-9659-b734665063fc
name: system-1
revision: 1
type: winlog
use_output: default
meta:
package:
name: system
version: 1.0.0
data_stream:
namespace: default
streams:
- id: winlog-system.application-3da1958d-2de9-4797-9659-b734665063fc
name: Application
data_stream:
dataset: system.application
type: logs
condition: '${host.platform} == ''windows'''
ignore_older: 72h
tags: null
- id: winlog-system.security-3da1958d-2de9-4797-9659-b734665063fc
name: Security
data_stream:
dataset: system.security
type: logs
condition: '${host.platform} == ''windows'''
tags: null
- id: winlog-system.system-3da1958d-2de9-4797-9659-b734665063fc
name: System
data_stream:
dataset: system.system
type: logs
condition: '${host.platform} == ''windows'''
tags: null
- id: 3da1958d-2de9-4797-9659-b734665063fc
name: system-1
revision: 1
type: system/metrics
use_output: default
meta:
package:
name: system
version: 1.0.0
data_stream:
namespace: default
streams:
- id: system/metrics-system.cpu-3da1958d-2de9-4797-9659-b734665063fc
data_stream:
dataset: system.cpu
type: metrics
metricsets:
- cpu
cpu.metrics:
- percentages
- normalized_percentages
period: 10s
- id: system/metrics-system.diskio-3da1958d-2de9-4797-9659-b734665063fc
data_stream:
dataset: system.diskio
type: metrics
metricsets:
- diskio
diskio.include_devices: null
period: 10s
- id: system/metrics-system.filesystem-3da1958d-2de9-4797-9659-b734665063fc
data_stream:
dataset: system.filesystem
type: metrics
metricsets:
- filesystem
period: 1m
processors:
- drop_event.when.regexp:
system.filesystem.mount_point: ^/(sys|cgroup|proc|dev|etc|host|lib|snap)($|/)
- id: system/metrics-system.fsstat-3da1958d-2de9-4797-9659-b734665063fc
data_stream:
dataset: system.fsstat
type: metrics
metricsets:
- fsstat
period: 1m
processors:
- drop_event.when.regexp:
system.fsstat.mount_point: ^/(sys|cgroup|proc|dev|etc|host|lib|snap)($|/)
- id: system/metrics-system.load-3da1958d-2de9-4797-9659-b734665063fc
data_stream:
dataset: system.load
type: metrics
metricsets:
- load
condition: '${host.platform} != ''windows'''
period: 10s
- id: system/metrics-system.memory-3da1958d-2de9-4797-9659-b734665063fc
data_stream:
dataset: system.memory
type: metrics
metricsets:
- memory
period: 10s
- id: system/metrics-system.network-3da1958d-2de9-4797-9659-b734665063fc
data_stream:
dataset: system.network
type: metrics
metricsets:
- network
period: 10s
network.interfaces: null
- id: system/metrics-system.process-3da1958d-2de9-4797-9659-b734665063fc
data_stream:
dataset: system.process
type: metrics
metricsets:
- process
period: 10s
process.include_top_n.by_cpu: 5
process.include_top_n.by_memory: 5
process.cmdline.cache.enabled: true
process.cgroups.enabled: false
process.include_cpu_ticks: false
processes:
- .*
- id: >-
system/metrics-system.process.summary-3da1958d-2de9-4797-9659-b734665063fc
data_stream:
dataset: system.process.summary
type: metrics
metricsets:
- process_summary
period: 10s
- id: >-
system/metrics-system.socket_summary-3da1958d-2de9-4797-9659-b734665063fc
data_stream:
dataset: system.socket_summary
type: metrics
metricsets:
- socket_summary
period: 10s
- id: system/metrics-system.uptime-3da1958d-2de9-4797-9659-b734665063fc
data_stream:
dataset: system.uptime
type: metrics
metricsets:
- uptime
period: 10s
- id: 47a212ab-48c2-4500-b4e8-cda8bed44b95
name: apm-1
revision: 1
type: apm
use_output: default
meta:
package:
name: apm
version: 0.3.0
data_stream:
namespace: default
apm-server:
api_key:
enabled: false
limit: 100
capture_personal_data: true
idle_timeout: 45s
default_service_environment: null
expvar.enabled: false
host: 'localhost:8200'
max_connections: 0
max_event_size: 307200
max_header_size: 1048576
read_timeout: 3600s
response_headers: null
rum:
enabled: true
allow_headers: null
allow_origins:
- '*'
allow_service_names: null
event_rate.limit: 10
event_rate.lru_size: 10000
exclude_from_grouping: ^/webpack
library_pattern: node_modules|bower_components|~
response_headers: null
source_mapping:
metadata: []
secret_token: null
shutdown_timeout: 30s
write_timeout: 30s
agent_config: []
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment