直接看配置：

processors:
  - add_cloud_metadata: ~
  - add_docker_metadata: ~
  - drop_event:
      when.or:
        - equals:
            container.name: "filebeat"
        - equals:
            container.name: "kibana"
        - equals:
            container.name: "es"
        - equals:
            container.name: "redis"   
        - equals:
            container.name: "elastalert"
        - equals:
            container.name: "mysql"
        - equals:
            container.name: "traefik"

            
  # - add_fields:
  #     target: ''
  #     fields:
  #       ip: '${serverIP}'
filebeat.inputs:
  - type: docker
    combine_partial: true
    containers:
      path: "/var/lib/docker/containers"
      ids: "*"
    multiline.pattern: '^\d{4}-\d{2}-\d{2}'
    multiline.negate: true
    multiline.match: after
  # - type: log
  #   enable: true
  #   paths: 
  #     - /var/log/yum.log
  # - type: container
  #   combine_partial: true
  #   paths:
  #     - '/var/lib/docker/containers/*/*.log'
filebeat.config:
  modules:
    path: ${path.config}/modules.d/*.yml
    reload.enabled: false
output.elasticsearch:
  hosts: 'es:9200'
  username: "elastic"
  password: "密码"
  
  #这里为输出新增代码
  indices:
    - index: "docker-%{[container.name]}-%{+yyyy.MM}"

setup.kibana:
  host: "kibana:5601"


#主要是这个配置（filebeat版本7+）
setup.template.name: "docker"
setup.template.pattern: "docker-*"
setup.template.enabled: true
setup.template.overwrite: true
setup.ilm.enabled: false