Initial commit

logstash/Dockerfile

@@ -0,0 +1,10 @@
+ARG ELK_VERSION
+
+# https://github.com/elastic/logstash-docker
+FROM docker.elastic.co/logstash/logstash:${ELK_VERSION}
+
+HEALTHCHECK --interval=240s --timeout=120s --retries=5 \
+  CMD curl -s -XGET 'http://127.0.0.1:9600'
+
+# Add your logstash plugins setup here
+# Example: RUN logstash-plugin install logstash-filter-json

logstash/config/logstash.yml

@@ -0,0 +1,9 @@
+---
+http.host: "0.0.0.0"
+
+## X-Pack security credentials
+xpack.monitoring.elasticsearch.hosts: ${ELASTICSEARCH_HOST_PORT}
+xpack.monitoring.enabled: true
+xpack.monitoring.elasticsearch.username: ${ELASTIC_USERNAME}
+xpack.monitoring.elasticsearch.password: ${ELASTIC_PASSWORD}
+xpack.monitoring.elasticsearch.ssl.certificate_authority: /certs/ca.crt

logstash/config/pipelines.yml

@@ -0,0 +1,11 @@
+# For per pipeline config, check docs: https://www.elastic.co/guide/en/logstash/current/logstash-settings-file.html
+
+- pipeline.id: main
+  path.config: "/usr/share/logstash/pipeline/main.conf"
+  queue.type: memory
+
+#- pipeline.id: second_pipeline
+#  path.config: "/usr/share/logstash/pipeline/second.conf"
+#  queue.type: persisted
+#  pipeline.batch.size: 125
+#  queue.page_capacity: 50mb

logstash/pipeline/main.conf

@@ -0,0 +1,20 @@
+input {
+    beats {
+        port => 5044
+    }
+}
+
+filter {
+
+}
+
+output {
+    elasticsearch {
+        hosts => "${ELASTICSEARCH_HOST_PORT}"
+        user => "${ELASTIC_USERNAME}"
+        password => "${ELASTIC_PASSWORD}"
+        ssl => true
+        ssl_certificate_verification => false
+        cacert => "/certs/ca.crt"
+    }
+}