Skip to content

Commit 2014d79

Browse files
authored
Update filebeat-k8s.yml
1 parent a672eb8 commit 2014d79

File tree

1 file changed

+8
-9
lines changed

1 file changed

+8
-9
lines changed

diagnostics/opensearch/filebeat/conf/filebeat-k8s.yml

Lines changed: 8 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -8,15 +8,14 @@ filebeat.autodiscover:
88
- /var/log/containers/*-${data.container.id}.log # CRI path
99
ignore_older: 24h
1010
processors:
11-
- drop_event:
12-
when:
13-
or:
14-
- equals:
15-
kubernetes.namespace: "kube-system"
16-
- equals:
17-
kubernetes.namespace: "kube-public"
18-
- equals:
19-
kubernetes.namespace: "kube-node-lease"
11+
- drop_event.when:
12+
or:
13+
- equals:
14+
kubernetes.namespace: "kube-system"
15+
- equals:
16+
kubernetes.namespace: "kube-public"
17+
- equals:
18+
kubernetes.namespace: "kube-node-lease"
2019
- add_cloud_metadata: ~
2120
#Currently TENANT_NAME is not passed as ENV variable. Using labels to extract TENANT_NAME
2221
- copy_fields:

0 commit comments

Comments
 (0)