apiVersion: v1
kind: ConfigMap
metadata:
  name: filebeat-config
  namespace: app-notifications
data:
  filebeat.yml: |
    filebeat.inputs:
    - type: filestream
      id: kubernetes-containers
      paths:
        - /var/log/containers/*_app-notifications_*.log
      prospector:
        scanner:
          fingerprint.enabled: true
          fingerprint.offset: 0
          fingerprint.length: 512
      parsers:
        - container: ~

    processors:
      - add_kubernetes_metadata:
          in_cluster: true
          host: ${NODE_NAME}
      - drop_event:
          when:
            not:
              or:
                - regexp:
                    kubernetes.pod.name: "^backend-.*"
                - regexp:
                    kubernetes.pod.name: "^service-.*"
                - regexp:
                    kubernetes.pod.name: "^mysql-.*"
                - regexp:
                    kubernetes.pod.name: "^rabbitmq-.*"

    logging.level: info

    output.logstash:
      hosts: ["logstash.app-notifications.svc.cluster.local:5044"]