migrate to VictoriaLogs

Author: tuxtof

docker-compose.yml

@@ -27,15 +27,13 @@ services:
         max-size: "10m"
         max-file: "3"
 
-  # filebeat:
-  #   image: docker.elastic.co/beats/filebeat:8.17.3
+  # vector:
+  #   image: timberio/vector:0.46.0-debian
   #   user: root
   #   environment:
-  #     ELASTICSEARCH_HOSTS: ${ELASTICSEARCH_HOSTS}
-  #     ELASTICSEARCH_USERNAME: elastic
-  #     ELASTICSEARCH_PASSWORD: ${ELASTICSEARCH_PASSWORD}
+  #     VLOGS_URI: ${VLOGS_URI}
   #   volumes:
-  #     - ./filebeat.yml:/usr/share/filebeat/filebeat.yml
+  #     - ./vector.yaml:/etc/vector/vector.yaml
   #     - /var/lib/docker/containers:/var/lib/docker/containers:ro
   #     - /var/run/docker.sock:/var/run/docker.sock
   #   depends_on:

filebeat.yml

@@ -0,0 +1,65 @@
+#                                    __   __  __
+#                                    \ \ / / / /
+#                                     \ V / / /
+#                                      \_/  \/
+#
+#                                    V E C T O R
+#                                   Configuration
+#
+# ------------------------------------------------------------------------------
+# Website: https://vector.dev
+# Docs: https://vector.dev/docs
+# Chat: https://chat.vector.dev
+# ------------------------------------------------------------------------------
+
+# Change this to use a non-default directory for Vector data storage:
+# data_dir: "/var/lib/vector"
+
+# Random Syslog-formatted logs
+sources:
+  docker_logs:
+    type: "docker_logs"
+
+# See the Vector Remap Language reference for more info: https://vrl.dev
+transforms:
+  parse_docker:
+    type: remap
+    inputs: ["docker_logs"]
+    source: |
+      .message = parse_json(.message) ?? .message
+
+# Print parsed logs to stdout
+sinks:
+  # print:
+  #   type: "console"
+  #   inputs: ["parse_docker"]
+  #   encoding:
+  #     codec: "json"
+  #     json:
+  #       pretty: true
+
+  vlogs:
+    type: http
+    inputs:
+      - parse_docker
+    uri: ${VLOGS_URI}
+    encoding:
+      codec: json
+    framing:
+      method: newline_delimited
+    compression: gzip
+    healthcheck:
+      enabled: false
+    request:
+      headers:
+        AccountID: "0"
+        ProjectID: "0"
+        VL-Stream-Fields: container_name
+        VL-Msg-Field: message.RequestPath
+        VL-Time-Field: timestamp
+# Vector's GraphQL API (disabled by default)
+# Uncomment to try it out with the `vector top` command or
+# in your browser at http://localhost:8686
+# api:
+#   enabled: true
+#   address: "127.0.0.1:8686"