Filebeat

Filebeat is a plugin for collecting and forwarding data logs to the Elastic Stack ecosystem: Elasticsearch, Logstash, and Kibana. Filebeat is installed in a Managed Service for Kubernetes cluster, collects cluster and pod logs, and forwards them to Managed Service for Elasticsearch.

1. Make sure that the Managed Service for Kubernetes cluster is located in the same cloud network as the Managed Service for Elasticsearch cluster.

2. Configure the application:

   • Namespace: Select a namespace or create a new one.
   • Application name: Enter an application name such as filebeat.
   • Elasticsearch username: Enter the account name Filebeat will use to connect to the Managed Service for Elasticsearch cluster.
   • Elasticsearch connection password: Enter the password for the account in the Managed Service for Elasticsearch cluster.
   • Elasticsearch FQDN: Enter the Managed Service for Elasticsearch cluster URL and port, such as https://c-c9q07rjo9c11q4e1p0om.rw.mdb.yandexcloud.net:9200. For more detail on connecting to a cluster, please see the service documentation.

3. Click Install.

4. Connect to the Kibana web interface and make sure that Kubernetes cluster events are being received.

• Collecting and forwarding Kubernetes logs to ElasticSearch.
• Analyzing the logs in ElasticSearch.

Yandex Cloud technical support responds to requests 24 hours a day, 7 days a week. The types of requests available and their response time depend on your pricing plan. You can activate paid support in the management console. Learn more about requesting technical support.