98 Commits

Author SHA1 Message Date
docker-elk-updater[bot]
824b546452 Update to v9.2.2 2025-12-07 00:34:45 +00:00
docker-elk-updater[bot]
ee4274f1cc Update to v9.2.1 2025-11-16 00:32:23 +00:00
docker-elk-updater[bot]
16f6720f71 Update to v9.2.0 2025-10-26 00:32:11 +00:00
docker-elk-updater[bot]
13083887fa Update to v9.1.5 2025-10-12 00:30:00 +00:00
docker-elk-updater[bot]
3fa56d2015 Update to v9.1.4 2025-09-21 00:30:59 +00:00
docker-elk-updater[bot]
bf3427f2e4 Update to v9.1.3 2025-08-31 00:31:33 +00:00
docker-elk-updater[bot]
1772ed67e9 Update to v9.1.2 2025-08-17 00:33:25 +00:00
docker-elk-updater[bot]
36fe97521d Update to v9.1.1 2025-08-10 00:34:59 +00:00
docker-elk-updater[bot]
14eaa46cd6 Update to v9.1.0 2025-08-03 00:36:10 +00:00
docker-elk-updater[bot]
11ac0bad81 Update to v9.0.4 2025-07-22 22:50:56 +00:00
Antoine Cotten
660d1b5ae6 fix(metricbeat): Enable SYS_PTRACE, use host cgroup ns
Closes #1087
2025-07-22 23:20:20 +02:00
docker-elk-updater[bot]
a56ae17be9 Update to v9.0.3 2025-06-29 00:34:15 +00:00
docker-elk-updater[bot]
ac4a01fe60 Update to v9.0.2 2025-06-08 00:33:19 +00:00
docker-elk-updater[bot]
959a57ba3b Update to v9.0.1 2025-05-08 16:26:23 +00:00
Antoine Cotten
1325376adc docs: Update all links from elastic.co/guide to /docs 2025-04-24 13:38:35 +02:00
Antoine Cotten
604f1f5c8b Update to v9.0.0
List of changes impacting docker-elk:

- [kibana]: Several features now require an encryption key for saved
  objects. Such key must be set via the configuration option
  `xpack.encryptedSavedObjects.encryptionKey`.

  Ref: https://www.elastic.co/guide/en/kibana/8.18/xpack-security-secure-saved-objects.html

- [enterprise-search]: Discontinued in 9.x versions.

  Refs:
  - https://www.elastic.co/guide/en/enterprise-search/8.18/upgrading-to-9-x.html
  - https://www.elastic.co/blog/app-search-to-elasticsearch
2025-04-16 01:43:50 +02:00
Antoine Cotten
c97a67ee12 chore(curator): update to 8.0.21 2025-04-07 10:41:06 +02:00
Antoine Cotten
4ff3ff7c25 chore(fleet): Update namespace of elastic-agent image 2025-04-05 11:14:07 +02:00
docker-elk-updater[bot]
439875e08e Update to v8.17.4 2025-03-30 00:31:51 +00:00
docker-elk-updater[bot]
32678e24cd Update to v8.17.3 2025-03-10 10:08:11 +00:00
Antoine Cotten
ab73727785 fix(metricbeat): limit of total fields exceeded
The current configuration requires a number of fields which exceeds the
current limit. From the Metricbeat event logs:

  Limit of total fields [10200] has been exceeded while adding new
  fields [7]

We raised this limit from its default of 10000 to 10200 in the commit
035a0e798b, but it was since raised to
1250 upstream in v8.16.2 (elastic/beats#41640), making that
configuration unnecessary.

Ref. #1059
2025-03-10 10:58:49 +01:00
docker-elk-updater[bot]
02ba8bc0a7 Update to v8.17.2 2025-02-16 00:31:29 +00:00
docker-elk-updater[bot]
ead650f05f Update to v8.17.1 2025-01-26 00:28:08 +00:00
docker-elk-updater[bot]
7ba6ec4f48 Update to v8.17.0 2024-12-15 00:34:33 +00:00
docker-elk-updater[bot]
8e62bd4099 Update to v8.15.5 2024-12-01 00:35:38 +00:00
docker-elk-updater[bot]
7f38a9834b Update to v8.16.1 2024-11-24 00:32:38 +00:00
docker-elk-updater[bot]
f3c81fdf46 Update to v8.16.0 2024-11-17 00:31:33 +00:00
docker-elk-updater[bot]
a7b9e209e6 Update to v8.15.3 2024-10-20 00:29:36 +00:00
docker-elk-updater[bot]
58e9bc012f Update to v8.15.2 2024-10-01 12:00:14 +00:00
Antoine Cotten
035a0e798b fix(metricbeat): limit of total fields exceeded
The current configuration requires a number of fields which exceeds the
default limit of 10000 fields.

Ref. #1020
2024-10-01 13:48:21 +02:00
Antoine Cotten
24306fd49d feat!: Remove support for Compose v1
There has been no release of the deprecated 'docker-compose' Python
package since v1.29.2, which was published in May 2021[1]. This release
is currently broken due to a breaking change in the 'docker' Python
package at version 7.0.0[1], and there is seemlingly no plan to release
a patch version of Compose v1 to address the problem.

The official path forward is to use Compose v2, which is now bundled
with the Docker client and available on all platforms where Docker is
supported.

This commit additionally removes the 'version' attribute from Compose
files, since it was obsoleted in the Compose Spec[3].

Closes #1017

[1]: https://pypi.org/project/docker-compose/#history
[2]: docker/docker-py#3194
[3]: https://compose-spec.io
2024-09-17 09:20:56 +02:00
Antoine Cotten
e8a539777f fix(build): Set a default value for each build arg
Closes #1015
2024-09-14 18:31:30 +00:00
Antoine Cotten
5da1badcf9 feat(ext/filebeat): ingest ES logs via elasticsearch module
Ensures that Elasticsearch log entries are processed through dedicated
ingestion pipelines, so that their fields can be automatically
extracted.
2024-02-14 20:46:37 +01:00
Antoine Cotten
c77a5a9ba9 chore(ext): remove Logspout extension
This software is no longer maintained.

Nowadays, Filebeat largely addresses the problems that Logspout was
designed to solve.
2024-02-12 14:06:33 +01:00
Antoine Cotten
5dd178ac1a chore(curator): update to 8.0.10 2024-02-12 13:46:14 +01:00
Antoine Cotten
bd55cfaf64 feat(fleet): collect Docker logs and metrics
Mirrors the behaviour of the Metricsbeat and Filebeat extensions through
Elastic Agent, using the Docker integration.
2024-02-12 12:36:56 +01:00
Antoine Cotten
44822f6045 fix(filebeat): set explicit Docker-centric defaults
The default_config changed in elastic/beats@41ab08cd (v8.12.0) from
Docker to Kubernetes defaults. This change also changes the default
output from 'container' to 'input'.

Before we are able to update to v8.12, we need to set defaults which are
suitable for the configuration that docker-elk ships with.

Refs:
  https://github.com/elastic/beats/blob/v8.12.0/filebeat/autodiscover/builder/hints/config.go#L30-L51
  https://www.elastic.co/guide/en/beats/filebeat/8.12/filebeat-input-container.html
  https://www.elastic.co/guide/en/beats/filebeat/8.12/filebeat-input-filestream.html
2024-02-12 10:00:07 +01:00
Antoine Cotten
39510e0c0c doc: Convert deprecated Alerts syntax markers
https://docs.github.com/en/get-started/writing-on-github/getting-started-with-writing-and-formatting-on-github/basic-writing-and-formatting-syntax#alerts

Signed-off-by: Antoine Cotten <hello@acotten.com>
2023-10-17 10:26:25 +02:00
Antoine Cotten
6db3e37334 feat(ext/curator): Update to v8
Curator is now major version locked with Elasticsearch.
https://www.elastic.co/guide/en/elasticsearch/client/curator/current/versions.html
2023-02-17 16:06:30 +01:00
docker-elk-updater[bot]
717966a2be Set FLEET_SERVER_HOST explicitly 2023-02-01 00:08:22 +00:00
Antoine Cotten
0ebda1156f doc(ext): Clarify purpose of exposed TCP ports 2022-11-22 14:48:12 +01:00
Antoine Cotten
e202d6ba7c doc(ext/entsearch): Simplify encryption key example 2022-11-22 14:33:37 +01:00
Antoine Cotten
87f5894f65 feat(ext/beats): Use unprivileged publish users 2022-11-22 11:37:50 +01:00
Antoine Cotten
141b38a083 feat(ext/metricbeat): Further drop perms for monitoring
The built-in 'remote_monitoring_user' has full permissions on monitoring
indices, which is more than Metricbeat needs to collect metrics from
remote components.
2022-11-18 21:47:46 +01:00
Antoine Cotten
4961f99438 feat(ext/metricbeat): Add switch to disable monit modules 2022-11-18 19:20:46 +01:00
Antoine Cotten
654a18dcdb feat(ext/beats): Monitor using unprivileged user
Both the collection and storage of monitoring data are now performed
using the unpriviliged built-in users 'remote_monitoring_user' and
'beats_system' respectively, instead of the 'elastic' superuser.
2022-11-18 17:10:20 +01:00
Antoine Cotten
595f42cc90 doc: Fix markdown linter warnings 2022-11-18 16:06:10 +01:00
Antoine Cotten
00e1964a2f doc(ext/metricbeat): Add screenshots 2022-11-18 14:01:02 +01:00
Antoine Cotten
436f7076d7 doc(ext/fleet): Add screenshots 2022-11-18 14:01:02 +01:00
Antoine Cotten
ac464b2d99 feat(ext/beats): Monitor via internal collectors 2022-11-18 14:01:02 +01:00