17
08/23
filebeat按docker容器名创建不同的索引
直接看配置: processors: - add_cloud_metadata: ~ - add_docker_metadata: ~ - drop_event: when.or: - equals: container.name: "filebeat" - equals: container.name: "kibana" - equals: container.name: "es" - equals: container.name: "redis" - equals: container.name: "elastalert" - equals: container.name: "mysql" - equals: ...