Filebeat

Filebeat is a plugin for collecting and forwarding data logs to the Elastic Stack ecosystem: Elasticsearch, Logstash, and Kibana. Filebeat is installed in a Managed Service for Kubernetes cluster, collects cluster and pod logs, and forwards them to Managed Service for Elasticsearch.

Filebeat version: 7.16.3.

1. Make sure that the Managed Service for Kubernetes cluster is located in the same cloud network as the Managed Service for Elasticsearch cluster.

2. Configure the application:

   • Namespace: Select a namespace or create a new one.
   • Application name: Enter a name for the application, e.g., filebeat.
   • Elasticsearch username: Enter the account name Filebeat will use to connect to the Managed Service for Elasticsearch cluster.
   • Elasticsearch connection password: Enter the password for the account in the Managed Service for Elasticsearch cluster.
   • Elasticsearch FQDN: Enter the Managed Service for Elasticsearch cluster URL and port, such as https://c-c9q07rjo9c11q4e1p0om.rw.mdb.yandexcloud.net:9200. For more information about connecting to a cluster, see the service documentation.

3. Click Install.

4. Wait for the application to change its status to Deployed.

5. Connect to the Kibana web interface and make sure that Kubernetes cluster events are being received.

• Collecting and forwarding Kubernetes logs to ElasticSearch.
• Analyzing the logs in ElasticSearch.

Yandex Cloud technical support is available 24/7. The types of requests you can submit and the appropriate response time depend on your pricing plan. You can switch to the paid support plan in the management console. You can learn more about the technical support terms here.