Welcome to Brewing in Beats! With this series, we're keeping you up to date with all that's new in Beats, from the details of work in progress pull requests to releases and learning resources.
Filebeat: -once flag to exit after finishing current work
-once flag is used, Filebeat starts all configured harvesters and prospectors and runs each prospector until the harvesters are closed. It is recommended to use the flag in combination with
close_eof so harvester directly close when the end of the file is reached. This could be used for measuring the Filebeat performance or for loading a fixed set of files.
Kibana dashboards for containerized processes
Added /net/ and /ns/ support to procfs library
Andrew added new features to the procfs Golang library, which does proc file system parsing and which we plan to use in Metricbeat.
Updated to Go 1.7.1
Our compiler images used in packaging, docker files used in tests, and our CI tools configurations were all updated to use Go 1.7.1 (from 1.7).
Filebeat: fix concurrent harvesters
In case newly started harvesters did not persist their first state before the next scan started, it could have happened that multiple harvesters were started for the same file. This could have been caused by a large number of files or the output blocking. There are more details in the PR.