We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent a672eb8 commit 2014d79Copy full SHA for 2014d79
diagnostics/opensearch/filebeat/conf/filebeat-k8s.yml
@@ -8,15 +8,14 @@ filebeat.autodiscover:
8
- /var/log/containers/*-${data.container.id}.log # CRI path
9
ignore_older: 24h
10
processors:
11
-- drop_event:
12
- when:
13
- or:
14
- - equals:
15
- kubernetes.namespace: "kube-system"
16
17
- kubernetes.namespace: "kube-public"
18
19
- kubernetes.namespace: "kube-node-lease"
+- drop_event.when:
+ or:
+ - equals:
+ kubernetes.namespace: "kube-system"
+ kubernetes.namespace: "kube-public"
+ kubernetes.namespace: "kube-node-lease"
20
- add_cloud_metadata: ~
21
#Currently TENANT_NAME is not passed as ENV variable. Using labels to extract TENANT_NAME
22
- copy_fields:
0 commit comments