1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
|
# filebeat::input
#
# A description of what this defined type does
#
# @summary A short summary of the purpose of this defined type.
#
# @example
# filebeat::input { 'namevar': }
define filebeat::input (
Enum['absent', 'present'] $ensure = present,
Array[String] $paths = [],
Array[String] $exclude_files = [],
Array[String] $containers_ids = ['\'*\''],
String $containers_path = '/var/lib/docker/containers',
String $containers_stream = 'all',
Boolean $combine_partial = false,
Enum['tcp', 'udp'] $syslog_protocol = 'udp',
String $syslog_host = 'localhost:5140',
Boolean $cri_parse_flags = false,
String $encoding = 'plain',
String $input_type = 'log',
Hash $fields = {},
Boolean $fields_under_root = $filebeat::fields_under_root,
Optional[String] $ignore_older = undef,
Optional[String] $close_older = undef,
String $doc_type = 'log',
String $scan_frequency = '10s',
Integer $harvester_buffer_size = 16384,
Optional[Integer] $harvester_limit = undef,
Boolean $tail_files = false,
String $backoff = '1s',
String $max_backoff = '10s',
Integer $backoff_factor = 2,
String $close_inactive = '5m',
Boolean $close_renamed = false,
Boolean $close_removed = true,
Boolean $close_eof = false,
Variant[String, Integer] $clean_inactive = 0,
Boolean $clean_removed = true,
Variant[Integer,String] $close_timeout = 0,
Boolean $force_close_files = false,
Array[String] $include_lines = [],
Array[String] $exclude_lines = [],
String $max_bytes = '10485760',
Hash $multiline = {},
Hash $json = {},
Array[String] $tags = [],
Boolean $symlinks = false,
Optional[String] $pipeline = undef,
Array $processors = [],
Boolean $pure_array = false,
String $host = 'localhost:9000',
Optional[String] $max_message_size = undef,
) {
$input_template = $filebeat::major_version ? {
'5' => 'prospector.yml.erb',
default => 'input.yml.erb',
}
if 'filebeat_version' in $facts and $facts['filebeat_version'] != false {
$skip_validation = versioncmp($facts['filebeat_version'], $filebeat::major_version) ? {
-1 => true,
default => false,
}
} else {
$skip_validation = false
}
case $::kernel {
'Linux', 'OpenBSD' : {
$validate_cmd = ($filebeat::disable_config_test or $skip_validation) ? {
true => undef,
default => $filebeat::major_version ? {
'5' => "\"${filebeat::filebeat_path}\" -N -configtest -c \"%\"",
default => "\"${filebeat::filebeat_path}\" -c \"${filebeat::config_file}\" test config",
},
}
file { "filebeat-${name}":
ensure => $ensure,
path => "${filebeat::config_dir}/${name}.yml",
owner => 'root',
group => '0',
mode => $::filebeat::config_file_mode,
content => template("${module_name}/${input_template}"),
validate_cmd => $validate_cmd,
notify => Service['filebeat'],
require => File['filebeat.yml'],
}
}
'FreeBSD' : {
$validate_cmd = ($filebeat::disable_config_test or $skip_validation) ? {
true => undef,
default => '/usr/local/sbin/filebeat -N -configtest -c %',
}
file { "filebeat-${name}":
ensure => $ensure,
path => "${filebeat::config_dir}/${name}.yml",
owner => 'root',
group => 'wheel',
mode => $::filebeat::config_file_mode,
content => template("${module_name}/${input_template}"),
validate_cmd => $validate_cmd,
notify => Service['filebeat'],
require => File['filebeat.yml'],
}
}
'Windows' : {
$cmd_install_dir = regsubst($filebeat::install_dir, '/', '\\', 'G')
$filebeat_path = join([$cmd_install_dir, 'Filebeat', 'filebeat.exe'], '\\')
$validate_cmd = ($filebeat::disable_config_test or $skip_validation) ? {
true => undef,
default => $facts['filebeat_version'] ? {
'5' => "\"${filebeat_path}\" -N -configtest -c \"%\"",
default => "\"${filebeat_path}\" -c \"${filebeat::config_file}\" test config",
},
}
file { "filebeat-${name}":
ensure => $ensure,
path => "${filebeat::config_dir}/${name}.yml",
content => template("${module_name}/${input_template}"),
validate_cmd => $validate_cmd,
notify => Service['filebeat'],
require => File['filebeat.yml'],
}
}
default : {
fail($filebeat::kernel_fail_message)
}
}
}
|
