apiVersion: v1
kind: ConfigMap
metadata:
  name: filebeat-config
  namespace: app-notifications
data:
  filebeat.yml: |
    filebeat.autodiscover:
      providers:
        - type: kubernetes
          node: ${NODE_NAME}
          hints.enabled: false
          templates:
            - condition:
                equals:
                  kubernetes.namespace: "app-notifications"
              config:
                - type: container
                  paths:
                    - /var/log/containers/*_app-notifications_*.log
                  stream: stdout
                  fingerprint.enabled: false

    processors:
      - add_kubernetes_metadata:
          in_cluster: true
      - drop_event:
          when:
            not:
              or:
                - regexp:
                    kubernetes.pod.name: "^backend-.*"
                - regexp:
                    kubernetes.pod.name: "^service-.*"
                - regexp:
                    kubernetes.pod.name: "^mysql-.*"
                - regexp:
                    kubernetes.pod.name: "^rabbitmq-.*"

    logging.level: info

    queue.mem:
      events: 4096
      flush.min_events: 5
      flush.timeout: 5s

    output.logstash:
      hosts: ["logstash.app-notifications.svc.cluster.local:5044"]
      bulk_max_size: 10
      worker: 1
      compression_level: 3
      timeout: 30