filebeat.inputs: - type: container paths: - '/var/lib/docker/containers/*/*.log' processors: - add_docker_metadata: host: "unix:///var/run/docker.sock" - decode_json_fields: fields: ["message"] target: "json" overwrite_keys: true output.elasticsearch: hosts: ["18.141.135.47:9200"] username: "elastic" password: "changeme" indices: - index: "filebeat-%{[agent.version]}-%{+yyyy.MM.dd}" logging.json: true logging.metrics.enabled: false