Scavenger/docker-compose.logging.yml at main · dev-fani/Scavenger · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
version: '3.8'

services:
  elasticsearch:
    image: docker.elastic.co/elasticsearch/elasticsearch:8.11.0
    environment:
      - discovery.type=single-node
      - xpack.security.enabled=false
      - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
    ports:
      - "9200:9200"
    volumes:
      - elasticsearch_data:/usr/share/elasticsearch/data
    healthcheck:
      test: ["CMD-SHELL", "curl -sf http://localhost:9200/_cluster/health || exit 1"]
      interval: 30s
      timeout: 10s
      retries: 5
    networks:
      - logging

  logstash:
    image: docker.elastic.co/logstash/logstash:8.11.0
    volumes:
      - ./config/logstash.conf:/usr/share/logstash/pipeline/logstash.conf:ro
      - ./logs:/var/log/app:ro
    ports:
      - "5000:5000/udp"
      - "5044:5044"
      - "9600:9600"
    environment:
      - "LS_JAVA_OPTS=-Xmx256m -Xms256m"
    depends_on:
      elasticsearch:
        condition: service_healthy
    healthcheck:
      test: ["CMD-SHELL", "curl -sf http://localhost:9600 || exit 1"]
      interval: 30s
      timeout: 10s
      retries: 5
    networks:
      - logging

  kibana:
    image: docker.elastic.co/kibana/kibana:8.11.0
    ports:
      - "5601:5601"
    environment:
      - ELASTICSEARCH_HOSTS=http://elasticsearch:9200
    depends_on:
      elasticsearch:
        condition: service_healthy
    healthcheck:
      test: ["CMD-SHELL", "curl -sf http://localhost:5601/api/status || exit 1"]
      interval: 30s
      timeout: 10s
      retries: 5
    networks:
      - logging

  filebeat:
    image: docker.elastic.co/beats/filebeat:8.11.0
    user: root
    volumes:
      - ./config/filebeat.yml:/usr/share/filebeat/filebeat.yml:ro
      - ./logs:/var/log/app:ro
      - /var/lib/docker/containers:/var/lib/docker/containers:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - filebeat_data:/usr/share/filebeat/data
    depends_on:
      logstash:
        condition: service_healthy
    networks:
      - logging

  # ILM policy setup - runs once to configure retention
  es-setup:
    image: curlimages/curl:8.5.0
    depends_on:
      elasticsearch:
        condition: service_healthy
    volumes:
      - ./config/ilm-policy.json:/ilm-policy.json:ro
    entrypoint: >
      sh -c "
        curl -sf -X PUT http://elasticsearch:9200/_ilm/policy/scavngr-logs-policy
          -H 'Content-Type: application/json'
          -d @/ilm-policy.json &&
        curl -sf -X PUT http://elasticsearch:9200/_index_template/scavngr-logs
          -H 'Content-Type: application/json'
          -d '{\"index_patterns\":[\"scavngr-*\"],\"template\":{\"settings\":{\"index.lifecycle.name\":\"scavngr-logs-policy\",\"number_of_shards\":1,\"number_of_replicas\":0}}}' &&
        echo 'ES setup complete'
      "
    networks:
      - logging

volumes:
  elasticsearch_data:
  filebeat_data:

networks:
  logging:
    driver: bridge