From eb2c9428614654863b371cb245275b8d226a2914 Mon Sep 17 00:00:00 2001 From: RouxAntoine Date: Sun, 29 May 2022 15:05:18 +0200 Subject: [PATCH] feat: normalize kubernetes.container.name to container.name like docker log collecting --- filebeat-kubernetes.yml | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/filebeat-kubernetes.yml b/filebeat-kubernetes.yml index f4fb2dc..7b40009 100644 --- a/filebeat-kubernetes.yml +++ b/filebeat-kubernetes.yml @@ -40,6 +40,12 @@ processors: kubernetes.container.name: kilo - equals: kubernetes.container.name: cfssl-issuer + - rename: + fields: + - from: "kubernetes.container.name" + to: "container.name" + ignore_missing: true + fail_on_error: false setup: kibana: @@ -70,7 +76,7 @@ output.elasticsearch: ssl: verification_mode: none indices: - - index: "filebeat-%{[agent.version]}-%{[kubernetes.container.name]:common}-%{+yyyy.MM.dd}" + - index: "filebeat-%{[agent.version]}-%{[container.name]:common}-%{+yyyy.MM.dd}" #logging.json: true