How to run Filebeat on Kubernetes?

How to run Filebeat on Kubernetes?

You can use Filebeat Docker images on Kubernetes to retrieve and ship container logs. You deploy Filebeat as a DaemonSet to ensure there’s a running instance on each node of the cluster. Filebeat DaemonSet deployed in Kube-system namespace by default. you can change the namespace by modifying the manifest files. 

To Download Manifest file:

curl -L -O https://raw.githubusercontent.com/elastic/beats/6.6/deploy/kubernetes/filebeat-kubernetes.yaml

Change the default configuration for Elasticsearch in the manifest file if your Elasticsearch is not running on the default ports and localhost.

- name: ELASTICSEARCH_HOST

  value: elasticsearch.example.com  --> host fqdn or ip

- name: ELASTICSEARCH_PORT

  value: "9200"

  
  
 Now we'll deploy the Filebeat in Kubernetes :

 To deploy Filebeat to Kubernetes, run:

kubectl create -f filebeat-kubernetes.yaml

To check the status, run:

 $ kubectl --namespace=kube-system get ds/filebeat

NAME       DESIRED   CURRENT   READY     UP-TO-DATE   AVAILABLE   NODE-SELECTOR   AGE
filebeat   12        12        0         12           0           <none>          21d

Interesting Articles on Kubernetes:

Kubernetes : Kubernetes Node Management, Maintenance, Delete
How to add a  New Worker Node to a existing kubernetes Cluster
MinIO Client Installation and Quickstart
PLEG is not healthy: Kubernetes Worker Node is in "NotReady" state
Backup MySQL databases in Kubernetes
How to Run Automated Tasks in Kubernetes with a cronjob
How to Completely remove Kubernetes