Instructions to setup filebeat

[ScholliYT]

The current Readme doesn't specify how to setup a Filebeat for pushing the logs from i.e. monolithic to logstash.

My current setup with lancachenet/docker-compose looks like this:

• edit docker-compose.yml of lancachenet/docker-compose to include

  filebeat:
    image: docker.elastic.co/beats/filebeat:7.9.1
    volumes:
      - ${CACHE_ROOT}/logs:/data/logs
      - ./config/filebeat/filebeat.yml:/usr/share/filebeat/filebeat.yml

where ./config/filebeat/filebeat.yml is

name: "lancache"
filebeat.inputs:
- type: log
  paths:
  - '/data/logs/*.log'
  encoding: utf-8
output.logstash:
  hosts: ["logstash_IP:5044"]
  bulk_max_size: 1024

This sends the logs from the volume mounted into monolithic via filebeat to logstash where they get processed by the v7 pipeline from #10.

[ewancolyer]

For anyone that comes across this in future - A sample setup with docker compose has been merged in now which should do this for you :)