added logstash

templates/logstash.yaml

@@ -21,18 +21,20 @@ spec:
           requests:
             storage: {{ .Values.logstash.diskSpace }}
         storageClassName: {{ .Values.logstash.storageClassName }}
+{{- range .Values.logstash.pipelines }}
   services:  
-{{- range $index :=  until (.Values.logstash.count |int ) -}}
-{{- printf "\n"}}  
-    - name: beats-{{$index}}
+    - name: {{ .Values.logstash.pipelines_group_name }}
       service:
         spec:
           ports:
           - port: 5044
-            name: {{ $.Values.logstash.pipelines_group_name }}
+            name: {{ .name }}
+            protocol: TCP
+          - port: 514
+            name: {{ .name }}
             protocol: TCP
           selector:
-            statefulset.kubernetes.io/pod-name: logstash-beats-ls-{{$index}}
+            statefulset.kubernetes.io/pod-name: logstash-beats-ls-0
   {{- end }} 
   config: 
     {{- with .Values.logstash.config }}

values.yaml

@@ -100,7 +100,7 @@ kibana:
 
 
 logstash:
-  count: 1
+  count: 2
   image: docker.elastic.co/logstash/logstash
   config: {}
   diskSpace: 3Gi
@@ -120,7 +120,7 @@ logstash:
       pipeline.workers: 1
       pipeline.batch.size: 125
     
-  pipelines_group_name: "beats"
+  pipelines_group_name: "pipelines"
   workers: 1
   batch:
     size: 125
@@ -147,5 +147,27 @@ logstash:
           codec => rubydebug
         }
       }
+  - name: "syslog-pipeline"
+    input: |-
+      input {
+        syslog {
+          port => 514
+        }
+      }
+    filter: |-
+      filter {}
+
+    output: |-
+      output {
+        elasticsearch {
+          hosts => [ "${ELASTIC_ELASTICSEARCH_ES_HOSTS}" ]
+          index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
+          user => "${LOGSTASH_USER}"
+          password => "${LOGSTASH_PASSWORD}"
+        }
+        stdout { 
+          codec => rubydebug
+        }
+      }