config.yaml

options:
  install_sources:
    type: string
    default: "deb https://artifacts.elastic.co/packages/6.x/apt stable main"
    description: "Elastic Beats apt repository"
  install_keys:
    type: string
    default: D88E42B4
    description: "Elastic Beats apt repository key"
  logpath:
    type: string
    default: "/var/log/*.log /var/log/*/*.log"
    description: "Space separated log paths to monitor. Can contain wildcards."
  harvester_buffer_size:
    type: int
    default: 16384
    description: "Defines the buffer size every harvester uses when fetching the file"
  max_bytes:
    type: int
    default: 10485760
    description: "Maximum number of bytes a single log event can have. Default 10MB"
  exclude_files:
    type: string
    default: '["/filebeat.*", ".*gz$"]'
    description: |
      A list of regular expressions to match the files that you want Filebeat to ignore:
      https://www.elastic.co/guide/en/beats/filebeat/6.7/filebeat-input-log.html#filebeat-input-log-exclude-files"
  exclude_lines:
    type: string
    default: "[]"
    description: |
      A list of regular expressions to match the lines that you want Filebeat to exclude:
      https://www.elastic.co/guide/en/beats/filebeat/6.7/filebeat-input-log.html#filebeat-input-log-exclude-lines"
  fields:
    type: string
    default: ""
    description: "Space seperated list of key:value that the prospector will assign as field to each beat"
  kube_logs:
    type: boolean
    default: false
    description: |
      Whether or not to include the Kubernetes audit log as well as any K8s metadata
      when container logs are present on the system:
      https://www.elastic.co/guide/en/beats/filebeat/6.7/add-kubernetes-metadata.html

      Note: this option has no effect when related to a non Charmed Kubernetes charm.
  extra_inputs:
    type: string
    default: ""
    description: |
      A YAML list which will be injected to define additional prospectors/inputs.
  ignore_older:
    type: int
    default: 0
    description: |
      If this option is enabled, Filebeat ignores any files that were modified before the specified timespan.
      Configuring ignore_older can be especially useful if you keep log files for a long time. The passed 
      values should be integers, e.g., "90", "3600", "600". The values are assumed to be in seconds
      https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-log.html#filebeat-input-log-ignore-older"
  clean_inactive:
    type: int
    default: 0
    description: |
      When this option is enabled, Filebeat removes the state of a file after the specified period of inactivity has
      elapsed. Bear in mind that if clean_inactive is enabled, it must be greater than ignore_older + scan_frequency to
      make sure that no states are removed while a file is still being harvested. The passed values should be integers, 
      e.g., "90", "3600", "600". The values are assumed to be in seconds:
      https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-log.html#filebeat-input-log-clean-inactive"