Update filebeat-k8s.yml

duplocloud · Sep 25, 2024 · c738bc9 · c738bc9
1 parent 6698abb
commit c738bc9
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/diagnostics/opensearch/filebeat/conf/filebeat-k8s.yml b/diagnostics/opensearch/filebeat/conf/filebeat-k8s.yml
@@ -13,8 +13,11 @@ filebeat.inputs:
     paths:
       - "/opt/data/log/*/*.log"
     fields_under_root: true
-    fields:
-      log_type: log.tomcat-interface
+    processors:
+      - dissect:
+          tokenizer: "/opt/data/log/%{log_type}/%{log_file_name}.log"
+          field: "log.file.path"
+          target_prefix: "kami"
 processors:
 #Drop events from other namespaces except Duplo tenants.
 - drop_event: