---
# Copyright 2018, Vexxhost, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

filebeat_service_state: restarted
filebeat_oslo_log_multiline_config:
  pattern: '^[0-9-]{10} +[0-9:\.]+ +[0-9]+ +[A-Z]+ +[A-Za-z0-9\._]+ \[|Traceback'
  negate: true
  match: after
filebeat_prospectors:
  - type: log
    enabled: "{{ filebeat_repo_enabled | default(true) }}"
    paths:
      - /openstack/log/*repo_container*/apt-cacher-ng/apt-cacher.*
      - /openstack/log/*repo_container*/pypiserver/*.log
      - /openstack/log/*repo_container*/rsyncd.log
    tags:
      - infrastructure
      - repo-server
  - type: log
    enabled: "{{ filebeat_haproxy_enabled | default(true) }}"
    paths:
      - /var/log/haproxy/*.log
    tags:
      - infrastructure
      - haproxy
  - type: log
    enabled: "{{ filebeat_rabbitmq_enabled | default(true) }}"
    paths:
      - /openstack/log/*rabbit*/rabbitmq/*.log
      - /openstack/log/*rabbit*/rabbitmq/log/*.log
      - /var/log/rabbitmq/*.log
      - /var/log/rabbitmq/log/*.log
    multiline:
      pattern: '^='
      negate: true
      match: after
    tags:
      - infrastructure
      - rabbitmq
  - type: log
    enabled: "{{ filebeat_ceph_enabled | default(true) }}"
    paths:
      - /openstack/log/*ceph*/ceph/ceph-mon.*.log
      - /var/log/ceph/ceph-mon.*.log
    tags:
      - infrastructure
      - ceph
      - ceph-mon
  - type: log
    enabled: "{{ filebeat_ceph_enabled | default(true) }}"
    paths:
      - /openstack/log/*ceph*/ceph/ceph-mgr.*.log
      - /var/log/ceph/ceph-mgr.*.log
    tags:
      - infrastructure
      - ceph
      - ceph-mgr
  - type: log
    enabled: "{{ filebeat_ceph_enabled | default(true) }}"
    paths:
      - /openstack/log/*ceph*/ceph/ceph-osd.*.log
      - /var/log/ceph-osd.*.log
    tags:
      - infrastructure
      - ceph
      - ceph-osd
  - type: log
    enabled: "{{ filebeat_keystone_enabled | default(true) }}"
    paths:
      - /openstack/log/*keystone*/keystone/keystone.log
      - /var/log/keystone/keystone.log
    multiline: "{{ filebeat_oslo_log_multiline_config }}"
    tags:
      - openstack
      - keystone
  # NOTE(mnaser): Barbican ships to Journal
  - type: log
    enabled: "{{ filebeat_glance_enabled | default(true) }}"
    paths:
      - /openstack/log/*glance*/glance/*.log
      - /var/log/glance/*.log
    multiline: "{{ filebeat_oslo_log_multiline_config }}"
    tags:
      - openstack
      - glance
  # NOTE(mnaser): Cinder ships to journal
  - type: log
    enabled: "{{ filebeat_nova_enabled | default(true) }}"
    paths:
      - /openstack/log/*nova*/nova/*.log
      - /var/log/nova/*.log
    multiline: "{{ filebeat_oslo_log_multiline_config }}"
    tags:
      - openstack
      - nova
  - type: log
    enabled: "{{ filebeat_neutron_enabled | default(true) }}"
    paths:
      - /openstack/log/*neutron*/neutron/*.log
      - /var/log/neutron/*.log
    multiline: "{{ filebeat_oslo_log_multiline_config }}"
    tags:
      - openstack
      - neutron
  - type: log
    enabled: "{{ filebeat_heat_enabled | default(true) }}"
    paths:
      - /openstack/log/*heat*/heat/*.log
      - /var/log/heat/*.log
    multiline: "{{ filebeat_oslo_log_multiline_config }}"
    tags:
      - openstack
      - heat
  - type: log
    enabled: "{{ filebeat_designate_enabled | default(true) }}"
    paths:
      - /openstack/log/*designate*/designate/*.log
      - /var/log/designate/*.log
    multiline: "{{ filebeat_oslo_log_multiline_config }}"
    tags:
      - openstack
      - designate
  - type: log
    enabled: "{{ filebeat_swift_enabled | default(true) }}"
    paths:
      - /openstack/log/*swift*/account*.log
      - /var/log/swift/account*.log
    multiline:
      pattern: '^[A-Za-z]+[[:space:]]* +[0-9]{1,2} +[0-9:\.]+ +[A-Za-z0-9-]+ container-replicator: +[A-Za-z0-9-\ ]+'
      negate: false
      match: after
    tags:
      - openstack
      - swift
      - swift-account
  - type: log
    enabled: "{{ filebeat_swift_enabled | default(true) }}"
    paths:
      - /openstack/log/*swift*/container*.log
      - /var/log/swift/container*.log
    multiline:
      pattern: '^[A-Za-z]+[[:space:]]* +[0-9]{1,2} +[0-9:\.]+ +[A-Za-z0-9-]+ account-replicator: +[A-Za-z0-9-\ ]+'
      negate: false
      match: after
    tags:
      - openstack
      - swift
      - swift-container
  - type: log
    enabled: "{{ filebeat_swift_enabled | default(true) }}"
    paths:
      - /openstack/log/*swift*/object*.log
      - /var/log/swift/object*.log
    multiline:
      pattern: '^[A-Za-z]+[[:space:]]* +[0-9]{1,2} +[0-9:\.]+ +[A-Za-z0-9-]+ object-replicator: +[A-Za-z0-9-\ ]+'
      negate: false
      match: after
    tags:
      - openstack
      - swift
      - swift-object
  - type: log
    enabled: "{{ filebeat_swift_enabled | default(true) }}"
    paths:
      - /openstack/log/*swift*/proxy*.log
      - /var/log/swift/proxy*.log
    tags:
      - openstack
      - swift
      - swift-proxy
  - type: log
    enabled: "{{ filebeat_gnocchi_enabled | default(true) }}"
    paths:
      - /openstack/log/*gnocchi*/gnocchi/*.log
      - /var/log/gnocchi/*.log
    multiline: "{{ filebeat_oslo_log_multiline_config }}"
    tags:
      - openstack
      - gnocchi
  - type: log
    enabled: "{{ filebeat_ceilometer_enabled | default(true) }}"
    paths:
      - /openstack/log/*ceilometer*/ceilometer/*.log
      - /var/log/ceilometer/*.log
    multiline: "{{ filebeat_oslo_log_multiline_config }}"
    tags:
      - openstack
      - ceilometer
  - type: log
    enabled: "{{ filebeat_aodh_enabled | default(true) }}"
    paths:
      - /openstack/log/*aodh*/aodh/*.log
      - /var/log/aodh/*.log
    multiline: "{{ filebeat_oslo_log_multiline_config }}"
    tags:
      - openstack
      - aodh
  - type: log
    enabled: "{{ filebeat_ironic_enabled | default(true) }}"
    paths:
      - /openstack/log/*ironic*/ironic/*.log
      - /var/log/ironic/*.log
    multiline: "{{ filebeat_oslo_log_multiline_config }}"
    tags:
      - openstack
      - ironic
  - type: log
    enabled: "{{ filebeat_magnum_enabled | default(true) }}"
    paths:
      - /openstack/log/*magnum*/magnum/*.log
      - /var/log/magnum/*.log
    multiline: "{{ filebeat_oslo_log_multiline_config }}"
    tags:
      - openstack
      - magnum
  - type: log
    enabled: "{{ filebeat_trove_enabled | default(true) }}"
    paths:
      - /openstack/log/*trove*/trove/*.log
      - /var/log/trove/*.log
    multiline: "{{ filebeat_oslo_log_multiline_config }}"
    tags:
      - openstack
      - trove
  - type: log
    enabled: "{{ filebeat_sahara_enabled | default(true) }}"
    paths:
      - /openstack/log/*sahara*/sahara/*.log
      - /var/log/sahara/*.log
    multiline: "{{ filebeat_oslo_log_multiline_config }}"
    tags:
      - openstack
      - sahara
  - type: log
    enabled: "{{ filebeat_octavia_enabled | default(true) }}"
    paths:
      - /openstack/log/*octavia*/octavia/*.log
      - /var/log/octavia/*.log
    multiline: "{{ filebeat_oslo_log_multiline_config }}"
    tags:
      - openstack
      - octavia
  - type: log
    enabled: "{{ filebeat_tacker_enabled | default(true) }}"
    paths:
      - /openstack/log/*tacker*/tacker/*.log
      - /var/log/tacker/*.log
    multiline: "{{ filebeat_oslo_log_multiline_config }}"
    tags:
      - openstack
      - tacker
  - type: log
    enabled: "{{ filebeat_system_enabled | default(true) }}"
    paths:
      - /openstack/log/ansible-logging/*.log
      - /var/log/!(auth*).log
      - /var/log/libvirt/*.log
      - /var/log/libvirt/*/*.log
      - /var/log/lxc/*.log
    tags:
      - system
  - type: log
    enabled: "{{ filebeat_logging_enabled | default(true) }}"
    paths:
      - /openstack/log/*/beats/*.log
      - /openstack/log/*/curator/curator
      - /openstack/log/*/elasticsearch/*.log
      - /var/log/beats/*.log
      - /var/log/curator/curator
      - /var/log/elasticsearch/*.log
    tags:
      - beats
  # Journald supported from filebeat >= 7.16.0
  - type: journald
    enabled: "{{ filebeat_journald_enabled | default(false) }}"
    paths:
      - /var/log/journal
    tags:
      - journal

filebeat_ilm_policy_name: "filebeat-{{ beat_version }}"
filebeat_ilm_policy_template: "filebeat-{{ beat_version }}"
filebeat_ilm_policy_filename: "filebeat-ilm-policy.json"
filebeat_ilm_policy_file_location: "/etc/filebeat"

ilm_policy_name: "{{ filebeat_ilm_policy_name | default('') }}"
ilm_policy: "{{ (filebeat_ilm_policy | default(default_ilm_policy)) | default({}) }}"
ilm_policy_template: "{{ filebeat_ilm_policy_template | default('') }}"
ilm_policy_filename: "{{ (filebeat_ilm_policy_filename | default(default_ilm_policy_filename)) | default('') }}"
ilm_policy_file_location: "{{ (filebeat_ilm_policy_file_location | default(default_ilm_policy_file_location)) | default('') }}"

# beat processors. Empty dictionary sets `add_host_metadata: ~`
processors: {}

# Logging level
# Available log levels are error, warning, info, debug
filebeat_log_level: "{{ elastic_beat_log_level | default('info') }}"

# Enable IPtables logging module
filebeat_iptables_enabled: false
# The following allows one to specify log files in non-standard locations,
# defaulting to log collection in syslog
filebeat_iptables_log_paths: ["var/log/syslog"]

# Override flag to force Beats to set up index templates. If this is not
# set, templates are only pushed when the user is either upgrading the
# beat version or deploying for the first time in the presence of kibana nodes
elk_beat_setup: false

# Authentication credentials for monitoring when using ELK security features
# beats_system_username: ""
# beats_system_password: ""