Skip to content

fix issue #388 filebeat migrate from log to filestream #398

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 3 commits into
base: main
Choose a base branch
from
Open

fix issue #388 filebeat migrate from log to filestream #398

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
ed778d8
fix issue #388 filebeat migrate from log to filetstream
cbeaujoin-stellar Sep 29, 2025
3bf0d6f
fix indentation
cbeaujoin-stellar Sep 29, 2025
9b63c8c
Merge branch 'main' into fix/filebeat-migrate-to-filestream
cbeaujoin-stellar Oct 3, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
25 changes: 15 additions & 10 deletions roles/beats/templates/filebeat.yml.j2
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,8 @@ filebeat.inputs:

{% if beats_filebeat_log_input | bool %}
{% for input in beats_filebeat_log_inputs %}
- type: log
- type: filestream
id: {{ input }}-filestream
enabled: true
paths:
{% for path in beats_filebeat_log_inputs[input].paths %}
Expand All @@ -22,31 +23,35 @@ filebeat.inputs:
{% endif %}
{% endif %}
{% if beats_filebeat_log_inputs[input].multiline is defined %}
multiline:
parsers:
- multiline:
{% if beats_filebeat_log_inputs[input].multiline.type is defined %}
type: {{ beats_filebeat_log_inputs[input].multiline.type }}
type: {{ beats_filebeat_log_inputs[input].multiline.type }}
{% endif %}
{% if beats_filebeat_log_inputs[input].multiline.pattern is defined %}
pattern: '{{ beats_filebeat_log_inputs[input].multiline.pattern }}'
pattern: '{{ beats_filebeat_log_inputs[input].multiline.pattern }}'
{% endif %}
{% if beats_filebeat_log_inputs[input].multiline.negate is defined %}
negate: {{ beats_filebeat_log_inputs[input].multiline.negate }}
negate: {{ beats_filebeat_log_inputs[input].multiline.negate }}
{% endif %}
{% if beats_filebeat_log_inputs[input].multiline.match is defined %}
match: {{ beats_filebeat_log_inputs[input].multiline.match }}
match: {{ beats_filebeat_log_inputs[input].multiline.match }}
{% endif %}
{% endif %}

{% endfor %}
{% endif %}
{% if beats_filebeat_mysql_slowlog_input | bool %}
- type: log
- type: filestream
id: mysql-slowlog-filestream
enabled: true
paths:
- /var/log/mysql/*-slow.log
multiline.pattern: '^\#[[:space:]]Time'
multiline.negate: true
multiline.match: after
parsers:
- multiline:
pattern: '^\#[[:space:]]Time'
negate: true
match: after
fields:
mysql:
logtype: slowquery
Expand Down