Fix issues in custom filebeat image

Dockerfile

@@ -6,4 +6,8 @@ USER root
 COPY entrypoint.sh /usr/local/bin/entrypoint.sh
 RUN chmod +x /usr/local/bin/entrypoint.sh
 
-ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
+# Set the entry point to your custom script using tini
+ENTRYPOINT ["/usr/bin/tini", "--", "/usr/local/bin/entrypoint.sh"]
+
+# Set the CMD to pass the environment argument to Filebeat
+CMD ["-environment", "container"]

docker-compose.yml

@@ -0,0 +1,17 @@
+version: "3.8"
+
+services:
+  entgra-filebeat:
+    image: filebeat:8.2.0-entgra-v2
+    container_name: entgra-filebeat
+    restart: unless-stopped
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+    volumes:
+      - ./files/iots/logs/:/opt/logs
+      - ./files/filebeat/opt/filebeat-configs:/opt/filebeat-configs
+    command: ["--strict.perms=false"]
+    environment:
+      - TZ=Asia/Colombo
+      - LOGSTASH_HOST=logstash
+      - LOGSTASH_PORT=5044

entrypoint.sh

@@ -16,9 +16,13 @@ if [ "$HOST_PRIVATE_IP" != "null" ]; then
     OUTPUT_FILE="filebeat.yml"
 
     mkdir -p /opt/filebeat-configs/${HOST_PRIVATE_IP}
+    cp /opt/filebeat-configs/$TEMPLATE_FILE /opt/filebeat-configs/${HOST_PRIVATE_IP}/$OUTPUT_FILE
 
     # Replace the placeholder with the actual node name and write to the output file
-    sed "s/{{HOST_PRIVATE_IP}}/${HOST_PRIVATE_IP}/g" "/opt/filebeat-configs/$TEMPLATE_FILE" > "/opt/filebeat-configs/${HOST_PRIVATE_IP}/$OUTPUT_FILE"
+    sed -i 's/${HOST_PRIVATE_IP}/'$HOST_PRIVATE_IP'/g' /opt/filebeat-configs/${HOST_PRIVATE_IP}/$OUTPUT_FILE
+    sed -i 's/${LOGSTASH_HOST}/'$LOGSTASH_HOST'/g' /opt/filebeat-configs/${HOST_PRIVATE_IP}/$OUTPUT_FILE
+    sed -i 's/${LOGSTASH_PORT}/'$LOGSTASH_PORT'/g' /opt/filebeat-configs/${HOST_PRIVATE_IP}/$OUTPUT_FILE
+
     echo "Filebeat configuration file created: $OUTPUT_FILE"
 
     # Create symlinks
@@ -29,5 +33,5 @@ else
     echo "HostPrivateIPv4Address not found"
 fi
 
-# Run the original filebeat entrypoint
-exec /usr/bin/tini -- /usr/local/bin/docker-entrypoint "$@"
+# Execute the original Filebeat entry point with passed arguments
+exec /usr/local/bin/docker-entrypoint "$@"

files/filebeat/opt/filebeat-configs/filebeat.template.yml

@@ -0,0 +1,19 @@
+filebeat.inputs:
+  - type: log
+    enabled: true
+    tags: ["SwitchGearLogs"]
+    paths:
+      - /usr/share/filebeat/elk/switchgear.log
+    exclude_files: [".gz$"]
+    exclude_lines: ["^.*TRACE.*$"]
+
+output.logstash:
+  hosts: ["${LOGSTASH_HOST}:${LOGSTASH_PORT}"]
+
+processors:
+  - add_docker_metadata:
+      host: "unix:///host_docker/docker.sock"
+  - add_fields:
+      target: ""
+      fields:
+        node.name: "${HOST_PRIVATE_IP}" #custom node name