agent:
  logging:
    json: true
    level: info
    to_stderr: true
    use_output: logs
  monitoring:
    enabled: true
    logs: true
    metrics: true
    use_output: monitoring
inputs:
- data_stream:
    namespace: default
  id: kubernetes-301f9e9a-b059-4b90-858c-9e0a430cc2fd.kube-proxy
  meta:
    package:
      name: kubernetes
      version: 1.9.0
  name: container-log
  processors:
  - add_fields:
      fields:
        id: 916e0aaed5311e7cecfdf674ef6e8a4b30b4801e07b1a6379841a692c38f427a
        image:
          name: gke.gcr.io/kube-proxy-amd64:v1.23.14-gke.1800
        runtime: containerd
      target: container
  - add_fields:
      fields:
        container:
          name: kube-proxy
        labels:
          component: kube-proxy
          tier: node
        namespace: kube-system
        namespace_labels:
          kubernetes_io/metadata_name: kube-system
        namespace_uid: 38ea9476-f021-4af7-b41c-f9a7dc51de1c
        node:
          hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4.c.elastic-apps-163815.internal
          labels:
            beta_kubernetes_io/arch: amd64
            beta_kubernetes_io/instance-type: n1-standard-8
            beta_kubernetes_io/os: linux
            cloud_google_com/gke-boot-disk: pd-standard
            cloud_google_com/gke-container-runtime: containerd
            cloud_google_com/gke-cpu-scaling-level: "8"
            cloud_google_com/gke-logging-variant: DEFAULT
            cloud_google_com/gke-max-pods-per-node: "110"
            cloud_google_com/gke-nodepool: elastic-apps-vault-ci-dev-0
            cloud_google_com/gke-os-distribution: cos
            cloud_google_com/machine-family: n1
            cloud_google_com/private-node: "false"
            failure-domain_beta_kubernetes_io/region: us-central1
            failure-domain_beta_kubernetes_io/zone: us-central1-a
            kubernetes_io/arch: amd64
            kubernetes_io/hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
            kubernetes_io/os: linux
            node_kubernetes_io/instance-type: n1-standard-8
            topology_gke_io/zone: us-central1-a
            topology_kubernetes_io/region: us-central1
            topology_kubernetes_io/zone: us-central1-a
          name: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
          uid: 79fbdfba-26d2-4959-8526-c92e4e25e53e
        pod:
          ip: 10.128.0.27
          name: kube-proxy-gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
          uid: 301f9e9a-b059-4b90-858c-9e0a430cc2fd
      target: kubernetes
  - add_fields:
      fields:
        name: localhost
      target: orchestrator.cluster
  streams:
  - data_stream:
      dataset: kubernetes.container_logs
      type: logs
    parsers:
    - container: null
    - ndjson:
        add_error_key: true
        ignore_decoding_error: true
        message_key: message
        overwrite_keys: true
        target: json
    paths:
    - /var/log/containers/*916e0aaed5311e7cecfdf674ef6e8a4b30b4801e07b1a6379841a692c38f427a.log
    prospector.scanner.symlinks: true
  type: filestream
  use_output: logs
- data_stream:
    namespace: default
  id: kubernetes-3632eeec-71f1-4dc4-afce-28229d16f97c.filebeat
  meta:
    package:
      name: kubernetes
      version: 1.9.0
  name: container-log
  processors:
  - add_fields:
      fields:
        id: d4d11dfdba73ad9319e231e08747deb4bf3fe4f041e78fc9537bfaaee61dbc56
        image:
          name: docker.elastic.co/beats/filebeat:7.15.1
        runtime: containerd
      target: container
  - add_fields:
      fields:
        container:
          name: filebeat
        daemonset:
          name: ea-2411e-vgs4-filebeat
        labels:
          app: ea-2411e-vgs4-filebeat
          chart: filebeat-7.15.0
          controller-revision-hash: 84c56f4fc9
          heritage: Helm
          pod-template-generation: "2"
          release: ea-2411e-vgs4
        namespace: elastic-apps
        namespace_labels:
          certmanager_k8s_io/disable-validation: "true"
          kubernetes_io/metadata_name: elastic-apps
          watcher: enabled
        namespace_uid: 130bd03e-b9be-468d-aaec-c1aae61b20dd
        node:
          hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4.c.elastic-apps-163815.internal
          labels:
            beta_kubernetes_io/arch: amd64
            beta_kubernetes_io/instance-type: n1-standard-8
            beta_kubernetes_io/os: linux
            cloud_google_com/gke-boot-disk: pd-standard
            cloud_google_com/gke-container-runtime: containerd
            cloud_google_com/gke-cpu-scaling-level: "8"
            cloud_google_com/gke-logging-variant: DEFAULT
            cloud_google_com/gke-max-pods-per-node: "110"
            cloud_google_com/gke-nodepool: elastic-apps-vault-ci-dev-0
            cloud_google_com/gke-os-distribution: cos
            cloud_google_com/machine-family: n1
            cloud_google_com/private-node: "false"
            failure-domain_beta_kubernetes_io/region: us-central1
            failure-domain_beta_kubernetes_io/zone: us-central1-a
            kubernetes_io/arch: amd64
            kubernetes_io/hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
            kubernetes_io/os: linux
            node_kubernetes_io/instance-type: n1-standard-8
            topology_gke_io/zone: us-central1-a
            topology_kubernetes_io/region: us-central1
            topology_kubernetes_io/zone: us-central1-a
          name: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
          uid: 79fbdfba-26d2-4959-8526-c92e4e25e53e
        pod:
          ip: 10.56.5.102
          name: ea-2411e-vgs4-filebeat-ctgls
          uid: 3632eeec-71f1-4dc4-afce-28229d16f97c
      target: kubernetes
  - add_fields:
      fields:
        name: localhost
      target: orchestrator.cluster
  streams:
  - data_stream:
      dataset: kubernetes.container_logs
      type: logs
    parsers:
    - container: null
    - ndjson:
        add_error_key: true
        ignore_decoding_error: true
        message_key: message
        overwrite_keys: true
        target: json
    paths:
    - /var/log/containers/*d4d11dfdba73ad9319e231e08747deb4bf3fe4f041e78fc9537bfaaee61dbc56.log
    prospector.scanner.symlinks: true
  type: filestream
  use_output: logs
- data_stream:
    namespace: default
  id: kubernetes-3632eeec-71f1-4dc4-afce-28229d16f97c.filebeat-setup
  meta:
    package:
      name: kubernetes
      version: 1.9.0
  name: container-log
  processors:
  - add_fields:
      fields:
        id: 67eb7f808ab1a126b44292ddde9fabe2c49571d398bbe2b18fdb0aef06fbb921
        image:
          name: docker.elastic.co/beats/filebeat:7.15.1
        runtime: containerd
      target: container
  - add_fields:
      fields:
        container:
          name: filebeat-setup
        daemonset:
          name: ea-2411e-vgs4-filebeat
        labels:
          app: ea-2411e-vgs4-filebeat
          chart: filebeat-7.15.0
          controller-revision-hash: 84c56f4fc9
          heritage: Helm
          pod-template-generation: "2"
          release: ea-2411e-vgs4
        namespace: elastic-apps
        namespace_labels:
          certmanager_k8s_io/disable-validation: "true"
          kubernetes_io/metadata_name: elastic-apps
          watcher: enabled
        namespace_uid: 130bd03e-b9be-468d-aaec-c1aae61b20dd
        node:
          hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4.c.elastic-apps-163815.internal
          labels:
            beta_kubernetes_io/arch: amd64
            beta_kubernetes_io/instance-type: n1-standard-8
            beta_kubernetes_io/os: linux
            cloud_google_com/gke-boot-disk: pd-standard
            cloud_google_com/gke-container-runtime: containerd
            cloud_google_com/gke-cpu-scaling-level: "8"
            cloud_google_com/gke-logging-variant: DEFAULT
            cloud_google_com/gke-max-pods-per-node: "110"
            cloud_google_com/gke-nodepool: elastic-apps-vault-ci-dev-0
            cloud_google_com/gke-os-distribution: cos
            cloud_google_com/machine-family: n1
            cloud_google_com/private-node: "false"
            failure-domain_beta_kubernetes_io/region: us-central1
            failure-domain_beta_kubernetes_io/zone: us-central1-a
            kubernetes_io/arch: amd64
            kubernetes_io/hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
            kubernetes_io/os: linux
            node_kubernetes_io/instance-type: n1-standard-8
            topology_gke_io/zone: us-central1-a
            topology_kubernetes_io/region: us-central1
            topology_kubernetes_io/zone: us-central1-a
          name: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
          uid: 79fbdfba-26d2-4959-8526-c92e4e25e53e
        pod:
          ip: 10.56.5.102
          name: ea-2411e-vgs4-filebeat-ctgls
          uid: 3632eeec-71f1-4dc4-afce-28229d16f97c
      target: kubernetes
  - add_fields:
      fields:
        name: localhost
      target: orchestrator.cluster
  streams:
  - data_stream:
      dataset: kubernetes.container_logs
      type: logs
    parsers:
    - container: null
    - ndjson:
        add_error_key: true
        ignore_decoding_error: true
        message_key: message
        overwrite_keys: true
        target: json
    paths:
    - /var/log/containers/*67eb7f808ab1a126b44292ddde9fabe2c49571d398bbe2b18fdb0aef06fbb921.log
    prospector.scanner.symlinks: true
  type: filestream
  use_output: logs
- data_stream:
    namespace: default
  id: kubernetes-553760b2-a897-4153-8bb1-97779bc78c62.logstash
  meta:
    package:
      name: kubernetes
      version: 1.9.0
  name: container-log
  processors:
  - add_fields:
      fields:
        id: 57745bf54530c5788405104d233485f82c0faa19a6be39f632b6d4298ce35054
        image:
          name: docker.elastic.co/infra/llama-logstash:7.16.1-0
        runtime: containerd
      target: container
  - add_fields:
      fields:
        container:
          name: logstash
        labels:
          app: ea-llama-logstash
          controller-revision-hash: ea-llama-logstash-6677b99d8f
          statefulset_kubernetes_io/pod-name: ea-llama-logstash-2
        namespace: elastic-apps
        namespace_labels:
          certmanager_k8s_io/disable-validation: "true"
          kubernetes_io/metadata_name: elastic-apps
          watcher: enabled
        namespace_uid: 130bd03e-b9be-468d-aaec-c1aae61b20dd
        node:
          hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4.c.elastic-apps-163815.internal
          labels:
            beta_kubernetes_io/arch: amd64
            beta_kubernetes_io/instance-type: n1-standard-8
            beta_kubernetes_io/os: linux
            cloud_google_com/gke-boot-disk: pd-standard
            cloud_google_com/gke-container-runtime: containerd
            cloud_google_com/gke-cpu-scaling-level: "8"
            cloud_google_com/gke-logging-variant: DEFAULT
            cloud_google_com/gke-max-pods-per-node: "110"
            cloud_google_com/gke-nodepool: elastic-apps-vault-ci-dev-0
            cloud_google_com/gke-os-distribution: cos
            cloud_google_com/machine-family: n1
            cloud_google_com/private-node: "false"
            failure-domain_beta_kubernetes_io/region: us-central1
            failure-domain_beta_kubernetes_io/zone: us-central1-a
            kubernetes_io/arch: amd64
            kubernetes_io/hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
            kubernetes_io/os: linux
            node_kubernetes_io/instance-type: n1-standard-8
            topology_gke_io/zone: us-central1-a
            topology_kubernetes_io/region: us-central1
            topology_kubernetes_io/zone: us-central1-a
          name: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
          uid: 79fbdfba-26d2-4959-8526-c92e4e25e53e
        pod:
          ip: 10.56.5.63
          name: ea-llama-logstash-2
          uid: 553760b2-a897-4153-8bb1-97779bc78c62
        statefulset:
          name: ea-llama-logstash
      target: kubernetes
  - add_fields:
      fields:
        name: localhost
      target: orchestrator.cluster
  streams:
  - data_stream:
      dataset: kubernetes.container_logs
      type: logs
    parsers:
    - container: null
    - ndjson:
        add_error_key: true
        ignore_decoding_error: true
        message_key: message
        overwrite_keys: true
        target: json
    paths:
    - /var/log/containers/*57745bf54530c5788405104d233485f82c0faa19a6be39f632b6d4298ce35054.log
    prospector.scanner.symlinks: true
  type: filestream
  use_output: logs
- data_stream:
    namespace: default
  id: kubernetes-6d978c72-88b4-4a43-9680-31219e058ff5.csi-driver-registrar
  meta:
    package:
      name: kubernetes
      version: 1.9.0
  name: container-log
  processors:
  - add_fields:
      fields:
        id: 77c85163b8f2c83c89b22c3ae6c39f69528c2e15808fad435edd34a65d9ace75
        image:
          name: gke.gcr.io/csi-node-driver-registrar:v2.5.0-gke.1
        runtime: containerd
      target: container
  - add_fields:
      fields:
        container:
          name: csi-driver-registrar
        daemonset:
          name: pdcsi-node
        labels:
          controller-revision-hash: 77655f775d
          k8s-app: gcp-compute-persistent-disk-csi-driver
          pod-template-generation: "2"
        namespace: kube-system
        namespace_labels:
          kubernetes_io/metadata_name: kube-system
        namespace_uid: 38ea9476-f021-4af7-b41c-f9a7dc51de1c
        node:
          hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4.c.elastic-apps-163815.internal
          labels:
            beta_kubernetes_io/arch: amd64
            beta_kubernetes_io/instance-type: n1-standard-8
            beta_kubernetes_io/os: linux
            cloud_google_com/gke-boot-disk: pd-standard
            cloud_google_com/gke-container-runtime: containerd
            cloud_google_com/gke-cpu-scaling-level: "8"
            cloud_google_com/gke-logging-variant: DEFAULT
            cloud_google_com/gke-max-pods-per-node: "110"
            cloud_google_com/gke-nodepool: elastic-apps-vault-ci-dev-0
            cloud_google_com/gke-os-distribution: cos
            cloud_google_com/machine-family: n1
            cloud_google_com/private-node: "false"
            failure-domain_beta_kubernetes_io/region: us-central1
            failure-domain_beta_kubernetes_io/zone: us-central1-a
            kubernetes_io/arch: amd64
            kubernetes_io/hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
            kubernetes_io/os: linux
            node_kubernetes_io/instance-type: n1-standard-8
            topology_gke_io/zone: us-central1-a
            topology_kubernetes_io/region: us-central1
            topology_kubernetes_io/zone: us-central1-a
          name: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
          uid: 79fbdfba-26d2-4959-8526-c92e4e25e53e
        pod:
          ip: 10.128.0.27
          name: pdcsi-node-jxxtc
          uid: 6d978c72-88b4-4a43-9680-31219e058ff5
      target: kubernetes
  - add_fields:
      fields:
        name: localhost
      target: orchestrator.cluster
  streams:
  - data_stream:
      dataset: kubernetes.container_logs
      type: logs
    parsers:
    - container: null
    - ndjson:
        add_error_key: true
        ignore_decoding_error: true
        message_key: message
        overwrite_keys: true
        target: json
    paths:
    - /var/log/containers/*77c85163b8f2c83c89b22c3ae6c39f69528c2e15808fad435edd34a65d9ace75.log
    prospector.scanner.symlinks: true
  type: filestream
  use_output: logs
- data_stream:
    namespace: default
  id: kubernetes-6d978c72-88b4-4a43-9680-31219e058ff5.gce-pd-driver
  meta:
    package:
      name: kubernetes
      version: 1.9.0
  name: container-log
  processors:
  - add_fields:
      fields:
        id: 74b7b705d0b73d3bd4e782e7196fccbb3a9f969ee15a36f0ca7ec5386bc42f8a
        image:
          name: gke.gcr.io/gcp-compute-persistent-disk-csi-driver:v1.7.4-gke.0@sha256:b23592d15c081fa5add1432e5773f743e926bd70433d74fdf47a8e2309862a83
        runtime: containerd
      target: container
  - add_fields:
      fields:
        container:
          name: gce-pd-driver
        daemonset:
          name: pdcsi-node
        labels:
          controller-revision-hash: 77655f775d
          k8s-app: gcp-compute-persistent-disk-csi-driver
          pod-template-generation: "2"
        namespace: kube-system
        namespace_labels:
          kubernetes_io/metadata_name: kube-system
        namespace_uid: 38ea9476-f021-4af7-b41c-f9a7dc51de1c
        node:
          hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4.c.elastic-apps-163815.internal
          labels:
            beta_kubernetes_io/arch: amd64
            beta_kubernetes_io/instance-type: n1-standard-8
            beta_kubernetes_io/os: linux
            cloud_google_com/gke-boot-disk: pd-standard
            cloud_google_com/gke-container-runtime: containerd
            cloud_google_com/gke-cpu-scaling-level: "8"
            cloud_google_com/gke-logging-variant: DEFAULT
            cloud_google_com/gke-max-pods-per-node: "110"
            cloud_google_com/gke-nodepool: elastic-apps-vault-ci-dev-0
            cloud_google_com/gke-os-distribution: cos
            cloud_google_com/machine-family: n1
            cloud_google_com/private-node: "false"
            failure-domain_beta_kubernetes_io/region: us-central1
            failure-domain_beta_kubernetes_io/zone: us-central1-a
            kubernetes_io/arch: amd64
            kubernetes_io/hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
            kubernetes_io/os: linux
            node_kubernetes_io/instance-type: n1-standard-8
            topology_gke_io/zone: us-central1-a
            topology_kubernetes_io/region: us-central1
            topology_kubernetes_io/zone: us-central1-a
          name: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
          uid: 79fbdfba-26d2-4959-8526-c92e4e25e53e
        pod:
          ip: 10.128.0.27
          name: pdcsi-node-jxxtc
          uid: 6d978c72-88b4-4a43-9680-31219e058ff5
      target: kubernetes
  - add_fields:
      fields:
        name: localhost
      target: orchestrator.cluster
  streams:
  - data_stream:
      dataset: kubernetes.container_logs
      type: logs
    parsers:
    - container: null
    - ndjson:
        add_error_key: true
        ignore_decoding_error: true
        message_key: message
        overwrite_keys: true
        target: json
    paths:
    - /var/log/containers/*74b7b705d0b73d3bd4e782e7196fccbb3a9f969ee15a36f0ca7ec5386bc42f8a.log
    prospector.scanner.symlinks: true
  type: filestream
  use_output: logs
- data_stream:
    namespace: default
  id: kubernetes-91ece8a1-232a-4a0f-bc94-8ec585ea32c0.auditbeat
  meta:
    package:
      name: kubernetes
      version: 1.9.0
  name: container-log
  processors:
  - add_fields:
      fields:
        id: f617e4ccad8d8b1e48c57c99d4692d768227f5bffe2b5f82e54df700fd374f09
        image:
          name: us-central1-docker.pkg.dev/elastic-firelink/docker/auditbeat:8.5.3
        runtime: containerd
      target: container
  - add_fields:
      fields:
        container:
          name: auditbeat
        daemonset:
          name: auditbeat
        labels:
          app: auditbeat
          controller-revision-hash: 77b969d664
          pod-template-generation: "3"
          release: auditbeat
        namespace: firelink-system
        namespace_labels:
          kubernetes_io/metadata_name: firelink-system
          watcher: enabled
        namespace_uid: 4f146b94-56a2-4697-b84f-bc5df5532440
        node:
          hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4.c.elastic-apps-163815.internal
          labels:
            beta_kubernetes_io/arch: amd64
            beta_kubernetes_io/instance-type: n1-standard-8
            beta_kubernetes_io/os: linux
            cloud_google_com/gke-boot-disk: pd-standard
            cloud_google_com/gke-container-runtime: containerd
            cloud_google_com/gke-cpu-scaling-level: "8"
            cloud_google_com/gke-logging-variant: DEFAULT
            cloud_google_com/gke-max-pods-per-node: "110"
            cloud_google_com/gke-nodepool: elastic-apps-vault-ci-dev-0
            cloud_google_com/gke-os-distribution: cos
            cloud_google_com/machine-family: n1
            cloud_google_com/private-node: "false"
            failure-domain_beta_kubernetes_io/region: us-central1
            failure-domain_beta_kubernetes_io/zone: us-central1-a
            kubernetes_io/arch: amd64
            kubernetes_io/hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
            kubernetes_io/os: linux
            node_kubernetes_io/instance-type: n1-standard-8
            topology_gke_io/zone: us-central1-a
            topology_kubernetes_io/region: us-central1
            topology_kubernetes_io/zone: us-central1-a
          name: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
          uid: 79fbdfba-26d2-4959-8526-c92e4e25e53e
        pod:
          ip: 10.56.5.91
          name: auditbeat-b64tp
          uid: 91ece8a1-232a-4a0f-bc94-8ec585ea32c0
      target: kubernetes
  - add_fields:
      fields:
        name: localhost
      target: orchestrator.cluster
  streams:
  - data_stream:
      dataset: kubernetes.container_logs
      type: logs
    parsers:
    - container: null
    - ndjson:
        add_error_key: true
        ignore_decoding_error: true
        message_key: message
        overwrite_keys: true
        target: json
    paths:
    - /var/log/containers/*f617e4ccad8d8b1e48c57c99d4692d768227f5bffe2b5f82e54df700fd374f09.log
    prospector.scanner.symlinks: true
  type: filestream
  use_output: logs
- data_stream:
    namespace: default
  id: kubernetes-91ece8a1-232a-4a0f-bc94-8ec585ea32c0.disable-journald-auditd
  meta:
    package:
      name: kubernetes
      version: 1.9.0
  name: container-log
  processors:
  - add_fields:
      fields:
        id: 31e2d23834872a1beac77a43098f8e5958d1517103ab3df6f09864b5283eeaa2
        image:
          name: us-central1-docker.pkg.dev/elastic-firelink/docker/centos:7
        runtime: containerd
      target: container
  - add_fields:
      fields:
        container:
          name: disable-journald-auditd
        daemonset:
          name: auditbeat
        labels:
          app: auditbeat
          controller-revision-hash: 77b969d664
          pod-template-generation: "3"
          release: auditbeat
        namespace: firelink-system
        namespace_labels:
          kubernetes_io/metadata_name: firelink-system
          watcher: enabled
        namespace_uid: 4f146b94-56a2-4697-b84f-bc5df5532440
        node:
          hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4.c.elastic-apps-163815.internal
          labels:
            beta_kubernetes_io/arch: amd64
            beta_kubernetes_io/instance-type: n1-standard-8
            beta_kubernetes_io/os: linux
            cloud_google_com/gke-boot-disk: pd-standard
            cloud_google_com/gke-container-runtime: containerd
            cloud_google_com/gke-cpu-scaling-level: "8"
            cloud_google_com/gke-logging-variant: DEFAULT
            cloud_google_com/gke-max-pods-per-node: "110"
            cloud_google_com/gke-nodepool: elastic-apps-vault-ci-dev-0
            cloud_google_com/gke-os-distribution: cos
            cloud_google_com/machine-family: n1
            cloud_google_com/private-node: "false"
            failure-domain_beta_kubernetes_io/region: us-central1
            failure-domain_beta_kubernetes_io/zone: us-central1-a
            kubernetes_io/arch: amd64
            kubernetes_io/hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
            kubernetes_io/os: linux
            node_kubernetes_io/instance-type: n1-standard-8
            topology_gke_io/zone: us-central1-a
            topology_kubernetes_io/region: us-central1
            topology_kubernetes_io/zone: us-central1-a
          name: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
          uid: 79fbdfba-26d2-4959-8526-c92e4e25e53e
        pod:
          ip: 10.56.5.91
          name: auditbeat-b64tp
          uid: 91ece8a1-232a-4a0f-bc94-8ec585ea32c0
      target: kubernetes
  - add_fields:
      fields:
        name: localhost
      target: orchestrator.cluster
  streams:
  - data_stream:
      dataset: kubernetes.container_logs
      type: logs
    parsers:
    - container: null
    - ndjson:
        add_error_key: true
        ignore_decoding_error: true
        message_key: message
        overwrite_keys: true
        target: json
    paths:
    - /var/log/containers/*31e2d23834872a1beac77a43098f8e5958d1517103ab3df6f09864b5283eeaa2.log
    prospector.scanner.symlinks: true
  type: filestream
  use_output: logs
- data_stream:
    namespace: default
  id: kubernetes-aaa49e9e-a064-4804-805e-46547f59452c.metricbeat
  meta:
    package:
      name: kubernetes
      version: 1.9.0
  name: container-log
  processors:
  - add_fields:
      fields:
        id: ffcac7b440032e1436bfd8033e6106b30456a16e2ee5e82fc48a3a4ff0b9e2c8
        image:
          name: docker.elastic.co/beats/metricbeat:7.15.1
        runtime: containerd
      target: container
  - add_fields:
      fields:
        container:
          name: metricbeat
        daemonset:
          name: ea-2411e-vgs4-metricbeat
        labels:
          app: ea-2411e-vgs4-metricbeat
          chart: metricbeat-7.15.0
          controller-revision-hash: 68d99794f
          heritage: Helm
          pod-template-generation: "2"
          release: ea-2411e-vgs4
        namespace: elastic-apps
        namespace_labels:
          certmanager_k8s_io/disable-validation: "true"
          kubernetes_io/metadata_name: elastic-apps
          watcher: enabled
        namespace_uid: 130bd03e-b9be-468d-aaec-c1aae61b20dd
        node:
          hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4.c.elastic-apps-163815.internal
          labels:
            beta_kubernetes_io/arch: amd64
            beta_kubernetes_io/instance-type: n1-standard-8
            beta_kubernetes_io/os: linux
            cloud_google_com/gke-boot-disk: pd-standard
            cloud_google_com/gke-container-runtime: containerd
            cloud_google_com/gke-cpu-scaling-level: "8"
            cloud_google_com/gke-logging-variant: DEFAULT
            cloud_google_com/gke-max-pods-per-node: "110"
            cloud_google_com/gke-nodepool: elastic-apps-vault-ci-dev-0
            cloud_google_com/gke-os-distribution: cos
            cloud_google_com/machine-family: n1
            cloud_google_com/private-node: "false"
            failure-domain_beta_kubernetes_io/region: us-central1
            failure-domain_beta_kubernetes_io/zone: us-central1-a
            kubernetes_io/arch: amd64
            kubernetes_io/hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
            kubernetes_io/os: linux
            node_kubernetes_io/instance-type: n1-standard-8
            topology_gke_io/zone: us-central1-a
            topology_kubernetes_io/region: us-central1
            topology_kubernetes_io/zone: us-central1-a
          name: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
          uid: 79fbdfba-26d2-4959-8526-c92e4e25e53e
        pod:
          ip: 10.56.5.156
          name: ea-2411e-vgs4-metricbeat-pdt5z
          uid: aaa49e9e-a064-4804-805e-46547f59452c
      target: kubernetes
  - add_fields:
      fields:
        name: localhost
      target: orchestrator.cluster
  streams:
  - data_stream:
      dataset: kubernetes.container_logs
      type: logs
    parsers:
    - container: null
    - ndjson:
        add_error_key: true
        ignore_decoding_error: true
        message_key: message
        overwrite_keys: true
        target: json
    paths:
    - /var/log/containers/*ffcac7b440032e1436bfd8033e6106b30456a16e2ee5e82fc48a3a4ff0b9e2c8.log
    prospector.scanner.symlinks: true
  type: filestream
  use_output: logs
- data_stream:
    namespace: default
  id: kubernetes-aaa49e9e-a064-4804-805e-46547f59452c.metricbeat-setup
  meta:
    package:
      name: kubernetes
      version: 1.9.0
  name: container-log
  processors:
  - add_fields:
      fields:
        id: 720796229636a6da99fa7b4393672e0abee6bdd1d70f509c1f96056967fb04b9
        image:
          name: docker.elastic.co/beats/metricbeat:7.15.1
        runtime: containerd
      target: container
  - add_fields:
      fields:
        container:
          name: metricbeat-setup
        daemonset:
          name: ea-2411e-vgs4-metricbeat
        labels:
          app: ea-2411e-vgs4-metricbeat
          chart: metricbeat-7.15.0
          controller-revision-hash: 68d99794f
          heritage: Helm
          pod-template-generation: "2"
          release: ea-2411e-vgs4
        namespace: elastic-apps
        namespace_labels:
          certmanager_k8s_io/disable-validation: "true"
          kubernetes_io/metadata_name: elastic-apps
          watcher: enabled
        namespace_uid: 130bd03e-b9be-468d-aaec-c1aae61b20dd
        node:
          hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4.c.elastic-apps-163815.internal
          labels:
            beta_kubernetes_io/arch: amd64
            beta_kubernetes_io/instance-type: n1-standard-8
            beta_kubernetes_io/os: linux
            cloud_google_com/gke-boot-disk: pd-standard
            cloud_google_com/gke-container-runtime: containerd
            cloud_google_com/gke-cpu-scaling-level: "8"
            cloud_google_com/gke-logging-variant: DEFAULT
            cloud_google_com/gke-max-pods-per-node: "110"
            cloud_google_com/gke-nodepool: elastic-apps-vault-ci-dev-0
            cloud_google_com/gke-os-distribution: cos
            cloud_google_com/machine-family: n1
            cloud_google_com/private-node: "false"
            failure-domain_beta_kubernetes_io/region: us-central1
            failure-domain_beta_kubernetes_io/zone: us-central1-a
            kubernetes_io/arch: amd64
            kubernetes_io/hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
            kubernetes_io/os: linux
            node_kubernetes_io/instance-type: n1-standard-8
            topology_gke_io/zone: us-central1-a
            topology_kubernetes_io/region: us-central1
            topology_kubernetes_io/zone: us-central1-a
          name: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
          uid: 79fbdfba-26d2-4959-8526-c92e4e25e53e
        pod:
          ip: 10.56.5.156
          name: ea-2411e-vgs4-metricbeat-pdt5z
          uid: aaa49e9e-a064-4804-805e-46547f59452c
      target: kubernetes
  - add_fields:
      fields:
        name: localhost
      target: orchestrator.cluster
  streams:
  - data_stream:
      dataset: kubernetes.container_logs
      type: logs
    parsers:
    - container: null
    - ndjson:
        add_error_key: true
        ignore_decoding_error: true
        message_key: message
        overwrite_keys: true
        target: json
    paths:
    - /var/log/containers/*720796229636a6da99fa7b4393672e0abee6bdd1d70f509c1f96056967fb04b9.log
    prospector.scanner.symlinks: true
  type: filestream
  use_output: logs
- data_stream:
    namespace: default
  id: kubernetes-d6d53cd5-309c-4073-aa40-46fa7bd84520.riemann
  meta:
    package:
      name: kubernetes
      version: 1.9.0
  name: container-log
  processors:
  - add_fields:
      fields:
        id: a19507be1a54742044ea1752a5015737637fb7e17f6c56f18e06b7af2dec1c36
        image:
          name: docker.elastic.co/infra/llama-riemann:0.3.8-3
        runtime: containerd
      target: container
  - add_fields:
      fields:
        container:
          name: riemann
        deployment:
          name: ea-llama-riemann
        labels:
          app: ea-llama-riemann
          pod-template-hash: 669f4dbff6
        namespace: elastic-apps
        namespace_labels:
          certmanager_k8s_io/disable-validation: "true"
          kubernetes_io/metadata_name: elastic-apps
          watcher: enabled
        namespace_uid: 130bd03e-b9be-468d-aaec-c1aae61b20dd
        node:
          hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4.c.elastic-apps-163815.internal
          labels:
            beta_kubernetes_io/arch: amd64
            beta_kubernetes_io/instance-type: n1-standard-8
            beta_kubernetes_io/os: linux
            cloud_google_com/gke-boot-disk: pd-standard
            cloud_google_com/gke-container-runtime: containerd
            cloud_google_com/gke-cpu-scaling-level: "8"
            cloud_google_com/gke-logging-variant: DEFAULT
            cloud_google_com/gke-max-pods-per-node: "110"
            cloud_google_com/gke-nodepool: elastic-apps-vault-ci-dev-0
            cloud_google_com/gke-os-distribution: cos
            cloud_google_com/machine-family: n1
            cloud_google_com/private-node: "false"
            failure-domain_beta_kubernetes_io/region: us-central1
            failure-domain_beta_kubernetes_io/zone: us-central1-a
            kubernetes_io/arch: amd64
            kubernetes_io/hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
            kubernetes_io/os: linux
            node_kubernetes_io/instance-type: n1-standard-8
            topology_gke_io/zone: us-central1-a
            topology_kubernetes_io/region: us-central1
            topology_kubernetes_io/zone: us-central1-a
          name: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
          uid: 79fbdfba-26d2-4959-8526-c92e4e25e53e
        pod:
          ip: 10.56.5.8
          name: ea-llama-riemann-669f4dbff6-fhq5v
          uid: d6d53cd5-309c-4073-aa40-46fa7bd84520
        replicaset:
          name: ea-llama-riemann-669f4dbff6
      target: kubernetes
  - add_fields:
      fields:
        name: localhost
      target: orchestrator.cluster
  streams:
  - data_stream:
      dataset: kubernetes.container_logs
      type: logs
    parsers:
    - container: null
    - ndjson:
        add_error_key: true
        ignore_decoding_error: true
        message_key: message
        overwrite_keys: true
        target: json
    paths:
    - /var/log/containers/*a19507be1a54742044ea1752a5015737637fb7e17f6c56f18e06b7af2dec1c36.log
    prospector.scanner.symlinks: true
  type: filestream
  use_output: logs
- data_stream:
    namespace: default
  id: kubernetes-e0378ddf-6dd6-4891-8835-31df4ad34305.filebeat
  meta:
    package:
      name: kubernetes
      version: 1.9.0
  name: container-log
  processors:
  - add_fields:
      fields:
        id: ca93190e1cf0f96624349b601bc2719a856cc088b517d32cf03df6cf1bc4f866
        image:
          name: docker.elastic.co/beats/filebeat:8.6.1
        runtime: containerd
      target: container
  - add_fields:
      fields:
        container:
          name: filebeat
        labels:
          app: vault-ci-dev
          app_kubernetes_io/instance: vault-ci-dev
          app_kubernetes_io/name: vault
          component: server
          controller-revision-hash: vault-ci-dev-794b7b4b57
          helm_sh/chart: vault-0.23.0
          logtype: json
          statefulset_kubernetes_io/pod-name: vault-ci-dev-0
          vault-active: "true"
          vault-initialized: "true"
          vault-perf-standby: "false"
          vault-sealed: "false"
          vault-version: 1.12.1
          watcher: enabled
        namespace: vault-ci-dev
        namespace_labels:
          kubernetes_io/metadata_name: vault-ci-dev
          name: vault-ci-dev
        namespace_uid: a50a15d7-8372-4653-875e-60caa1d7bbb7
        node:
          hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4.c.elastic-apps-163815.internal
          labels:
            beta_kubernetes_io/arch: amd64
            beta_kubernetes_io/instance-type: n1-standard-8
            beta_kubernetes_io/os: linux
            cloud_google_com/gke-boot-disk: pd-standard
            cloud_google_com/gke-container-runtime: containerd
            cloud_google_com/gke-cpu-scaling-level: "8"
            cloud_google_com/gke-logging-variant: DEFAULT
            cloud_google_com/gke-max-pods-per-node: "110"
            cloud_google_com/gke-nodepool: elastic-apps-vault-ci-dev-0
            cloud_google_com/gke-os-distribution: cos
            cloud_google_com/machine-family: n1
            cloud_google_com/private-node: "false"
            failure-domain_beta_kubernetes_io/region: us-central1
            failure-domain_beta_kubernetes_io/zone: us-central1-a
            kubernetes_io/arch: amd64
            kubernetes_io/hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
            kubernetes_io/os: linux
            node_kubernetes_io/instance-type: n1-standard-8
            topology_gke_io/zone: us-central1-a
            topology_kubernetes_io/region: us-central1
            topology_kubernetes_io/zone: us-central1-a
          name: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
          uid: 79fbdfba-26d2-4959-8526-c92e4e25e53e
        pod:
          ip: 10.56.5.209
          name: vault-ci-dev-0
          uid: e0378ddf-6dd6-4891-8835-31df4ad34305
        statefulset:
          name: vault-ci-dev
      target: kubernetes
  - add_fields:
      fields:
        name: localhost
      target: orchestrator.cluster
  streams:
  - data_stream:
      dataset: kubernetes.container_logs
      type: logs
    parsers:
    - container: null
    - ndjson:
        add_error_key: true
        ignore_decoding_error: true
        message_key: message
        overwrite_keys: true
        target: json
    paths:
    - /var/log/containers/*ca93190e1cf0f96624349b601bc2719a856cc088b517d32cf03df6cf1bc4f866.log
    prospector.scanner.symlinks: true
  type: filestream
  use_output: logs
- data_stream:
    namespace: default
  id: kubernetes-e0378ddf-6dd6-4891-8835-31df4ad34305.logrotate
  meta:
    package:
      name: kubernetes
      version: 1.9.0
  name: container-log
  processors:
  - add_fields:
      fields:
        id: 3e335544916342d9b155f9174f25ea6cbe7683d56efc503a165267ec798f64a6
        image:
          name: crazybus/logrotate:1.0.0
        runtime: containerd
      target: container
  - add_fields:
      fields:
        container:
          name: logrotate
        labels:
          app: vault-ci-dev
          app_kubernetes_io/instance: vault-ci-dev
          app_kubernetes_io/name: vault
          component: server
          controller-revision-hash: vault-ci-dev-794b7b4b57
          helm_sh/chart: vault-0.23.0
          logtype: json
          statefulset_kubernetes_io/pod-name: vault-ci-dev-0
          vault-active: "true"
          vault-initialized: "true"
          vault-perf-standby: "false"
          vault-sealed: "false"
          vault-version: 1.12.1
          watcher: enabled
        namespace: vault-ci-dev
        namespace_labels:
          kubernetes_io/metadata_name: vault-ci-dev
          name: vault-ci-dev
        namespace_uid: a50a15d7-8372-4653-875e-60caa1d7bbb7
        node:
          hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4.c.elastic-apps-163815.internal
          labels:
            beta_kubernetes_io/arch: amd64
            beta_kubernetes_io/instance-type: n1-standard-8
            beta_kubernetes_io/os: linux
            cloud_google_com/gke-boot-disk: pd-standard
            cloud_google_com/gke-container-runtime: containerd
            cloud_google_com/gke-cpu-scaling-level: "8"
            cloud_google_com/gke-logging-variant: DEFAULT
            cloud_google_com/gke-max-pods-per-node: "110"
            cloud_google_com/gke-nodepool: elastic-apps-vault-ci-dev-0
            cloud_google_com/gke-os-distribution: cos
            cloud_google_com/machine-family: n1
            cloud_google_com/private-node: "false"
            failure-domain_beta_kubernetes_io/region: us-central1
            failure-domain_beta_kubernetes_io/zone: us-central1-a
            kubernetes_io/arch: amd64
            kubernetes_io/hostname: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
            kubernetes_io/os: linux
            node_kubernetes_io/instance-type: n1-standard-8
            topology_gke_io/zone: us-central1-a
            topology_kubernetes_io/region: us-central1
            topology_kubernetes_io/zone: us-central1-a
          name: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
          uid: 79fbdfba-26d2-4959-8526-c92e4e25e53e
        pod:
          ip: 10.56.5.209
          name: vault-ci-dev-0
          uid: e0378ddf-6dd6-4891-8835-31df4ad34305
        statefulset:
          name: vault-ci-dev
      target: kubernetes
  - add_fields:
      fields:
        name: localhost
      target: orchestrator.cluster
  streams:
  - data_stream:
      dataset: kubernetes.container_logs
      type: logs
    parsers:
    - container: null
    - ndjson:
        add_error_key: true
        ignore_decoding_error: true
        message_key: message
        overwrite_keys: true
        target: json
    paths:
    - /var/log/containers/*3e335544916342d9b155f9174f25ea6cbe7683d56efc503a165267ec798f64a6.log
    prospector.scanner.symlinks: true
  type: filestream
  use_output: logs
outputs:
  logs:
    allow_older_versions: true
    hosts:
    - https://0ac06c5b05734013aec009e955ec8b7d.us-central1.gcp.foundit.no:443
    password: yeeXais3oa6AhShu2
    type: elasticsearch
    username: elastic-apps
  metrics:
    hosts:
    - https://365b555050af4980872d3e88c6c4cd69.us-central1.gcp.foundit.no:443
    password: yeeXais3oa6AhShu2
    type: elasticsearch
    username: elastic-apps
  monitoring:
    allow_older_versions: true
    hosts:
    - https://d6f8fb5f443bec27ef9da68d33044d1b.us-central1.gcp.foundit.no:443
    password: yeeXais3oa6AhShu2
    type: elasticsearch
    username: elastic-apps
providers:
  kubernetes:
    hints:
      enabled: true
    node: gke-elastic-apps-vau-elastic-apps-vau-0f62411e-vgs4
    scope: node
  kubernetes_leaderelection:
    enabled: false