Filebeat

Learn about configurations >

• clean_inactive | int

  When this option is enabled, Filebeat removes the state of a file after the specified period of inactivity has elapsed. Bear in mind that if clean_inactive is enabled, it must be greater than ignore_older + scan_frequency to make sure that no states are removed while a file is still being harvested. The passed values should be integers, e.g., "90", "3600", "600". The values are assumed to be in seconds: https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-log.html#filebeat-input-log-clean-inactive"

• exclude_files | string

  Default: ["/filebeat.*", ".*gz$"]

  A list of regular expressions to match the files that you want Filebeat to ignore: https://www.elastic.co/guide/en/beats/filebeat/6.7/filebeat-input-log.html#filebeat-input-log-exclude-files"

• exclude_lines | string

  Default: []

  A list of regular expressions to match the lines that you want Filebeat to exclude: https://www.elastic.co/guide/en/beats/filebeat/6.7/filebeat-input-log.html#filebeat-input-log-exclude-lines"

• extra_inputs | string

  A YAML list which will be injected to define additional prospectors/inputs.

• extra_packages | string

  Space separated list of extra deb packages to install.

• fields | string

  Space seperated list of key:value that the prospector will assign as field to each beat

• harvester_buffer_size | int

  Default: 16384

  Defines the buffer size every harvester uses when fetching the file

• ignore_older | int

  If this option is enabled, Filebeat ignores any files that were modified before the specified timespan. Configuring ignore_older can be especially useful if you keep log files for a long time. The passed values should be integers, e.g., "90", "3600", "600". The values are assumed to be in seconds https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-log.html#filebeat-input-log-ignore-older"

• install_keys | string

  Default: D88E42B4

  Elastic Beats apt repository key

• install_sources | string

  Default: deb https://artifacts.elastic.co/packages/6.x/apt stable main

  Elastic Beats apt repository

• kafka_hosts | string

  A comma separated list of kafka output hosts in addition to those from relations.

• kafka_topic | string

  Default: %{[type]}

  Topic name. Format strings are allowed.

• kafka_topics | string

  Expert setting topics filter.

• kafka_version | string

  Expert setting kafka version.

• kube_logs | boolean

  Whether or not to include the Kubernetes audit log as well as any K8s metadata when container logs are present on the system: https://www.elastic.co/guide/en/beats/filebeat/6.7/add-kubernetes-metadata.html

  Note: this option has no effect when related to a non Charmed Kubernetes charm.

• log_level | string

  Default: info

  Beats log level. One of debug, info, warning, error, or critical: https://www.elastic.co/guide/en/beats/filebeat/5.6/configuration-logging.html#level

• logging_to_syslog | boolean

  Default: True

  Send beats logs to syslog: https://www.elastic.co/guide/en/beats/filebeat/5.6/configuration-logging.html#_to_syslog

• logpath | string

  Default: /var/log/*.log /var/log/*/*.log

  Space separated log paths to monitor. Can contain wildcards.

• logstash_hosts | string

  A comma separated list of logstash output hosts in addition to those from relations.

• logstash_ssl_cert | string

  Public SSL certificate data (base64 encoded) for connecting securely to logstash.

• logstash_ssl_key | string

  Private SSL key data (base64 encoded) for connecting security to logstash.

• max_bytes | int

  Default: 10485760

  Maximum number of bytes a single log event can have. Default 10MB

• package_status | string

  Default: install

  The status of service-affecting packages will be set to this value in the dpkg database. Valid values are "install" and "hold".