dockbeat doesnot writes anything

[gavrmike]

Hi!

I would like use dockbeat for collect info about containers.

I run:
docker run --name dockbeat -d -v /var/run/docker.sock:/var/run/docker.sock --link es:elastic ingensi/dockbeat

and docker show me that it was correct started.
But nothing will happen anymore.
I could not found any index with name dockbeat in elastic.

docker logs dockbeat:
Error opening syslog: Unix syslog delivery error

it is not looks like correct working.

Could you help me with it?

PS i started elk through https:/cilium-team/docker-collector.git

[jalberto]

I am haivng same problem, if I go into the container (exec bash) I can see the dockbeat process as PID1 but nothign is loging.

the command runnning is:

/bin/sh -c dockbeat -c dockbeat.yml -e

If I run the same command nothing happens, but if I run:

dockbeat -c dockbeat.yml -e -v

it seems to start properly, seems like "bin/sh -c" is causing some trouble

[luckydonald]

If I run docker logs dockbeat
I get

Error opening syslog:  Unix syslog delivery error

Could that be related?

[luckydonald]

Also the dockbeat-docker.yml tries to connect to https://elasicsearch instead of https://elasic, what the README proposes.

[bradseefeld]

@luckydonald, try adding -e to the end of your docker run command:

docker run -d --name dockbeat \
    --restart unless-stopped \
    -v /var/run/docker.sock:/var/run/docker.sock \
    Ingensi/dockbeat:latest \
    -e

[datacarl]

Replace the default config and set logging.to_syslog to false. Worked for me and others.