「🏗️」 wip: logstash workinnnggg

docker/ELK/compose.yml

@@ -0,0 +1,4 @@
+include:
+  - ./logstash/compose.yml
+  # - ./kibana/compose.yml
+  # - ./elasticsearch/compose.yml

docker/ELK/elasticsearch/Dockerfile

@@ -0,0 +1,3 @@
+FROM		docker.elastic.co/elasticsearch/elasticsearch-wolfi:9.0.3
+
+COPY		--chown=elasticsearch:elasticsearch elasticsearch.yml /usr/share/elasticsearch/config/

docker/ELK/elasticsearch/compose.yml

@@ -0,0 +1,10 @@
+services:
+  elasticsearch:
+    container_name: transcendence-elasticsearch
+    build:
+      dockerfile: Dockerfile
+      context: .
+    environment:
+      - LOG_LEVEL=info
+      - ELASTIC_PASSWORD=${ELASTIC_PASSWORD}
+    mem_limit: 1gb

docker/ELK/kibana/Dockerfile

@@ -0,0 +1 @@
+FROM		kibana:9.0.3

docker/ELK/logstash/Dockerfile

@@ -0,0 +1,6 @@
+FROM		docker.elastic.co/logstash/logstash-wolfi:9.0.3
+
+RUN			rm -f /usr/share/logstash/pipeline/logstash.conf
+
+COPY		--chmod=777 pipeline/ /usr/share/logstash/pipeline/
+COPY		--chmod=777 config/ /usr/share/logstash/config/

docker/ELK/logstash/compose.yml

@@ -0,0 +1,14 @@
+services:
+  logstash:
+    container_name: transcendence-logstash
+    build:
+      dockerfile: Dockerfile
+      context: .
+    volumes:
+      - log-user:/var/log/user-api
+      - log-auth:/var/log/auth-api
+      - log-nginx:/var/log/nginx
+    environment:
+      - LOG_LEVEL=info
+    networks:
+      - elk

docker/ELK/logstash/config/logstash.yml

@@ -0,0 +1,2 @@
+api:
+  environment: production

docker/ELK/logstash/pipeline/logstash.conf

@@ -0,0 +1,27 @@
+input {
+	file {
+		path => "/var/log/user-api/log.log"
+		start_position => "beginning"
+		tags => [ "api", "user" ]
+	}
+	file {
+		path => "/var/log/auth-api/log.log"
+		start_position => "beginning"
+		tags => [ "api", "auth" ]
+	}
+	file {
+		path => "/var/log/nginx/log.log"
+		start_position => "beginning"
+		tags => [ "nginx", "front" ]
+	}
+	file {
+		path => "/var/log/nginx/err.log"
+		start_position => "beginning"
+		tags => [ "nginx", "front", "error" ]
+	}
+}
+
+output {
+	elasticsearch { hosts => ["transcendence-elasticsearch:9200"] }
+	stdout { codec => rubydebug }
+}