Ingest logs from s3 bucket using Filebeat

You can use the filebeat agent and configure it to ingest files in a s3 bucket and ingest logs in Kloudfuse. Use the https://kloudfuse.atlassian.net/wiki/x/CYAEL documentation to setup the the Filebeat and configure the s3 bucket details as below,

daemonset: enabled: false deployment: enabled: true filebeatConfig: filebeat.yml: | filebeat.inputs: - type: aws-s3 number_of_workers: 5 bucket_arn: '<<TBA s3 bucket ARN>>' access_key_id: '<<TBA>>' secret_access_key: '<<TBA>>' endpoint: amazonaws.com default_region: "${AWS_REGION:<<TBA>>}" fields: source: <<TBA Define the source for import> # The logs will be visible with the same source. setup.ilm.enabled: false setup.template.enabled: false output.elasticsearch: hosts: ["https://<<TBA Kloudfuse Endpoint>>:443/ingester/api/v1/filebeat"]

 

Once configured, the Filebeat will import the logs in the Kloudfuse endpoint configured.

Please reach out to the Kloudfuse team in case of any queries in the configuration.