API tools faq
paste
Antony-PB

elastic-agent.yml

Antony-PB
Mar 14th, 2023
102
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 13.12 KB | None | 0 0
raw download clone embed print report
  1. id: be31bde0-c1ac-11ed-a389-6d60c050478f
  2. revision: 2
  3. outputs:
  4. default:
  5. type: elasticsearch
  6. hosts:
  7. - 'https://172.19.0.2:9200'
  8. ssl.ca_trusted_fingerprint: 7752422fa9cbcdddc68887d2026230aab7778181f0b07f0ea228327450c940cd
  9. username: '${ES_USERNAME}'
  10. password: '${ES_PASSWORD}'
  11. output_permissions:
  12. default:
  13. _elastic_agent_monitoring:
  14. indices:
  15. - names:
  16. - logs-elastic_agent.apm_server-default
  17. privileges:
  18. - auto_configure
  19. - create_doc
  20. - names:
  21. - metrics-elastic_agent.apm_server-default
  22. privileges:
  23. - auto_configure
  24. - create_doc
  25. - names:
  26. - logs-elastic_agent.auditbeat-default
  27. privileges:
  28. - auto_configure
  29. - create_doc
  30. - names:
  31. - metrics-elastic_agent.auditbeat-default
  32. privileges:
  33. - auto_configure
  34. - create_doc
  35. - names:
  36. - logs-elastic_agent.cloud_defend-default
  37. privileges:
  38. - auto_configure
  39. - create_doc
  40. - names:
  41. - logs-elastic_agent.cloudbeat-default
  42. privileges:
  43. - auto_configure
  44. - create_doc
  45. - names:
  46. - metrics-elastic_agent.cloudbeat-default
  47. privileges:
  48. - auto_configure
  49. - create_doc
  50. - names:
  51. - logs-elastic_agent-default
  52. privileges:
  53. - auto_configure
  54. - create_doc
  55. - names:
  56. - metrics-elastic_agent.elastic_agent-default
  57. privileges:
  58. - auto_configure
  59. - create_doc
  60. - names:
  61. - metrics-elastic_agent.endpoint_security-default
  62. privileges:
  63. - auto_configure
  64. - create_doc
  65. - names:
  66. - logs-elastic_agent.endpoint_security-default
  67. privileges:
  68. - auto_configure
  69. - create_doc
  70. - names:
  71. - logs-elastic_agent.filebeat_input-default
  72. privileges:
  73. - auto_configure
  74. - create_doc
  75. - names:
  76. - metrics-elastic_agent.filebeat_input-default
  77. privileges:
  78. - auto_configure
  79. - create_doc
  80. - names:
  81. - logs-elastic_agent.filebeat-default
  82. privileges:
  83. - auto_configure
  84. - create_doc
  85. - names:
  86. - metrics-elastic_agent.filebeat-default
  87. privileges:
  88. - auto_configure
  89. - create_doc
  90. - names:
  91. - logs-elastic_agent.fleet_server-default
  92. privileges:
  93. - auto_configure
  94. - create_doc
  95. - names:
  96. - metrics-elastic_agent.fleet_server-default
  97. privileges:
  98. - auto_configure
  99. - create_doc
  100. - names:
  101. - logs-elastic_agent.heartbeat-default
  102. privileges:
  103. - auto_configure
  104. - create_doc
  105. - names:
  106. - metrics-elastic_agent.heartbeat-default
  107. privileges:
  108. - auto_configure
  109. - create_doc
  110. - names:
  111. - logs-elastic_agent.metricbeat-default
  112. privileges:
  113. - auto_configure
  114. - create_doc
  115. - names:
  116. - metrics-elastic_agent.metricbeat-default
  117. privileges:
  118. - auto_configure
  119. - create_doc
  120. - names:
  121. - logs-elastic_agent.osquerybeat-default
  122. privileges:
  123. - auto_configure
  124. - create_doc
  125. - names:
  126. - metrics-elastic_agent.osquerybeat-default
  127. privileges:
  128. - auto_configure
  129. - create_doc
  130. - names:
  131. - logs-elastic_agent.packetbeat-default
  132. privileges:
  133. - auto_configure
  134. - create_doc
  135. - names:
  136. - metrics-elastic_agent.packetbeat-default
  137. privileges:
  138. - auto_configure
  139. - create_doc
  140. _elastic_agent_checks:
  141. cluster:
  142. - monitor
  143. 9ebed505-5f40-4aae-b7aa-971496d1ecd6:
  144. indices:
  145. - names:
  146. - logs-system.auth-default
  147. privileges:
  148. - auto_configure
  149. - create_doc
  150. - names:
  151. - logs-system.syslog-default
  152. privileges:
  153. - auto_configure
  154. - create_doc
  155. - names:
  156. - logs-system.application-default
  157. privileges:
  158. - auto_configure
  159. - create_doc
  160. - names:
  161. - logs-system.system-default
  162. privileges:
  163. - auto_configure
  164. - create_doc
  165. - names:
  166. - logs-system.security-default
  167. privileges:
  168. - auto_configure
  169. - create_doc
  170. - names:
  171. - metrics-system.network-default
  172. privileges:
  173. - auto_configure
  174. - create_doc
  175. - names:
  176. - metrics-system.fsstat-default
  177. privileges:
  178. - auto_configure
  179. - create_doc
  180. - names:
  181. - metrics-system.process-default
  182. privileges:
  183. - auto_configure
  184. - create_doc
  185. - names:
  186. - metrics-system.load-default
  187. privileges:
  188. - auto_configure
  189. - create_doc
  190. - names:
  191. - metrics-system.filesystem-default
  192. privileges:
  193. - auto_configure
  194. - create_doc
  195. - names:
  196. - metrics-system.memory-default
  197. privileges:
  198. - auto_configure
  199. - create_doc
  200. - names:
  201. - metrics-system.diskio-default
  202. privileges:
  203. - auto_configure
  204. - create_doc
  205. - names:
  206. - metrics-system.process.summary-default
  207. privileges:
  208. - auto_configure
  209. - create_doc
  210. - names:
  211. - metrics-system.socket_summary-default
  212. privileges:
  213. - auto_configure
  214. - create_doc
  215. - names:
  216. - metrics-system.uptime-default
  217. privileges:
  218. - auto_configure
  219. - create_doc
  220. - names:
  221. - metrics-system.cpu-default
  222. privileges:
  223. - auto_configure
  224. - create_doc
  225. 6e9ac11d-7598-4e72-aca5-8e83471b873f:
  226. indices:
  227. - names:
  228. - logs-tcp.generic-default
  229. privileges:
  230. - auto_configure
  231. - create_doc
  232. agent:
  233. download:
  234. sourceURI: 'https://artifacts.elastic.co/downloads/'
  235. monitoring:
  236. enabled: true
  237. use_output: default
  238. namespace: default
  239. logs: true
  240. metrics: true
  241. inputs:
  242. - id: logfile-system-9ebed505-5f40-4aae-b7aa-971496d1ecd6
  243. name: system-2
  244. revision: 1
  245. type: logfile
  246. use_output: default
  247. meta:
  248. package:
  249. name: system
  250. version: 1.24.3
  251. data_stream:
  252. namespace: default
  253. package_policy_id: 9ebed505-5f40-4aae-b7aa-971496d1ecd6
  254. streams:
  255. - id: logfile-system.auth-9ebed505-5f40-4aae-b7aa-971496d1ecd6
  256. data_stream:
  257. dataset: system.auth
  258. type: logs
  259. ignore_older: 72h
  260. paths:
  261. - /var/log/auth.log*
  262. - /var/log/secure*
  263. exclude_files:
  264. - .gz$
  265. multiline:
  266. pattern: ^\s
  267. match: after
  268. tags:
  269. - system-auth
  270. processors:
  271. - add_locale: null
  272. - id: logfile-system.syslog-9ebed505-5f40-4aae-b7aa-971496d1ecd6
  273. data_stream:
  274. dataset: system.syslog
  275. type: logs
  276. paths:
  277. - /var/log/messages*
  278. - /var/log/syslog*
  279. exclude_files:
  280. - .gz$
  281. multiline:
  282. pattern: ^\s
  283. match: after
  284. processors:
  285. - add_locale: null
  286. ignore_older: 72h
  287. - id: winlog-system-9ebed505-5f40-4aae-b7aa-971496d1ecd6
  288. name: system-2
  289. revision: 1
  290. type: winlog
  291. use_output: default
  292. meta:
  293. package:
  294. name: system
  295. version: 1.24.3
  296. data_stream:
  297. namespace: default
  298. package_policy_id: 9ebed505-5f40-4aae-b7aa-971496d1ecd6
  299. streams:
  300. - id: winlog-system.application-9ebed505-5f40-4aae-b7aa-971496d1ecd6
  301. name: Application
  302. data_stream:
  303. dataset: system.application
  304. type: logs
  305. condition: '${host.platform} == ''windows'''
  306. ignore_older: 72h
  307. - id: winlog-system.system-9ebed505-5f40-4aae-b7aa-971496d1ecd6
  308. name: System
  309. data_stream:
  310. dataset: system.system
  311. type: logs
  312. condition: '${host.platform} == ''windows'''
  313. ignore_older: 72h
  314. - id: winlog-system.security-9ebed505-5f40-4aae-b7aa-971496d1ecd6
  315. name: Security
  316. data_stream:
  317. dataset: system.security
  318. type: logs
  319. condition: '${host.platform} == ''windows'''
  320. ignore_older: 72h
  321. - id: system/metrics-system-9ebed505-5f40-4aae-b7aa-971496d1ecd6
  322. name: system-2
  323. revision: 1
  324. type: system/metrics
  325. use_output: default
  326. meta:
  327. package:
  328. name: system
  329. version: 1.24.3
  330. data_stream:
  331. namespace: default
  332. package_policy_id: 9ebed505-5f40-4aae-b7aa-971496d1ecd6
  333. streams:
  334. - id: system/metrics-system.network-9ebed505-5f40-4aae-b7aa-971496d1ecd6
  335. data_stream:
  336. dataset: system.network
  337. type: metrics
  338. metricsets:
  339. - network
  340. period: 10s
  341. network.interfaces: null
  342. - id: system/metrics-system.fsstat-9ebed505-5f40-4aae-b7aa-971496d1ecd6
  343. data_stream:
  344. dataset: system.fsstat
  345. type: metrics
  346. metricsets:
  347. - fsstat
  348. period: 1m
  349. processors:
  350. - drop_event.when.regexp:
  351. system.fsstat.mount_point: ^/(sys|cgroup|proc|dev|etc|host|lib|snap)($|/)
  352. - id: system/metrics-system.process-9ebed505-5f40-4aae-b7aa-971496d1ecd6
  353. data_stream:
  354. dataset: system.process
  355. type: metrics
  356. metricsets:
  357. - process
  358. period: 10s
  359. process.include_top_n.by_cpu: 5
  360. process.include_top_n.by_memory: 5
  361. process.cmdline.cache.enabled: true
  362. process.cgroups.enabled: false
  363. process.include_cpu_ticks: false
  364. processes:
  365. - .*
  366. - id: system/metrics-system.load-9ebed505-5f40-4aae-b7aa-971496d1ecd6
  367. data_stream:
  368. dataset: system.load
  369. type: metrics
  370. metricsets:
  371. - load
  372. condition: '${host.platform} != ''windows'''
  373. period: 10s
  374. - id: system/metrics-system.filesystem-9ebed505-5f40-4aae-b7aa-971496d1ecd6
  375. data_stream:
  376. dataset: system.filesystem
  377. type: metrics
  378. metricsets:
  379. - filesystem
  380. period: 1m
  381. processors:
  382. - drop_event.when.regexp:
  383. system.filesystem.mount_point: ^/(sys|cgroup|proc|dev|etc|host|lib|snap)($|/)
  384. - id: system/metrics-system.memory-9ebed505-5f40-4aae-b7aa-971496d1ecd6
  385. data_stream:
  386. dataset: system.memory
  387. type: metrics
  388. metricsets:
  389. - memory
  390. period: 10s
  391. - id: system/metrics-system.diskio-9ebed505-5f40-4aae-b7aa-971496d1ecd6
  392. data_stream:
  393. dataset: system.diskio
  394. type: metrics
  395. metricsets:
  396. - diskio
  397. diskio.include_devices: null
  398. period: 10s
  399. - id: >-
  400. system/metrics-system.process.summary-9ebed505-5f40-4aae-b7aa-971496d1ecd6
  401. data_stream:
  402. dataset: system.process.summary
  403. type: metrics
  404. metricsets:
  405. - process_summary
  406. period: 10s
  407. - id: >-
  408. system/metrics-system.socket_summary-9ebed505-5f40-4aae-b7aa-971496d1ecd6
  409. data_stream:
  410. dataset: system.socket_summary
  411. type: metrics
  412. metricsets:
  413. - socket_summary
  414. period: 10s
  415. - id: system/metrics-system.uptime-9ebed505-5f40-4aae-b7aa-971496d1ecd6
  416. data_stream:
  417. dataset: system.uptime
  418. type: metrics
  419. metricsets:
  420. - uptime
  421. period: 10s
  422. - id: system/metrics-system.cpu-9ebed505-5f40-4aae-b7aa-971496d1ecd6
  423. data_stream:
  424. dataset: system.cpu
  425. type: metrics
  426. metricsets:
  427. - cpu
  428. cpu.metrics:
  429. - percentages
  430. - normalized_percentages
  431. period: 10s
  432. - id: tcp-tcp-6e9ac11d-7598-4e72-aca5-8e83471b873f
  433. name: antony-tcp-logs
  434. revision: 1
  435. type: tcp
  436. use_output: default
  437. meta:
  438. package:
  439. name: tcp
  440. version: 1.7.0
  441. data_stream:
  442. namespace: default
  443. package_policy_id: 6e9ac11d-7598-4e72-aca5-8e83471b873f
  444. streams:
  445. - id: tcp-tcp.generic-6e9ac11d-7598-4e72-aca5-8e83471b873f
  446. data_stream:
  447. dataset: tcp.generic
  448. host: 'localhost:9600'
  449. ssl: null
  450.  
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!