packetbeat.interfaces.device: any


packetbeat.flows:
  timeout: 30s
  period: 10s


packetbeat.protocols:

- type: icmp
  enabled: true

- type: dns
  ports: [53]

- type: http
  ports: [80, 5601, 8080, 8081]
  real_ip_header: "X-Forwarded-For"

- type: tls
  ports: [443, 8200]


packetbeat.procs:
  enabled: true
  monitored:

    - process: nginx
      cmdline_grep: nginx

    - process: java
      cmdline_grep: java

    - process: apm-server
      cmdline_grep: apm-server


name: "{{ inventory_hostname }}"
tags: ["{{ env }}", "lightsail"]


processors:

- add_cloud_metadata: ~
- add_host_metadata: ~

- drop_event:
    when:
      or:
        # Exclude Jolokia calls
        - contains.path: "/jolokia/?"
        # Exclude pinging metrics
        - equals.path: "/metrics"
        # Exclude pinging health
        - equals.path: "/health"


xpack.monitoring.enabled: true


output.elasticsearch:
  hosts: ["{{ elasticsearch_host }}"]
  username: "{{ elasticsearch_user }}"
  password: "{{ elasticsearch_password }}"


setup:
  kibana:
    host: "{{ kibana_host }}"
    username: "{{ elasticsearch_user }}"
    password: "{{ elasticsearch_password }}"
  dashboards.enabled: true

packetbeat.interfaces.device: any


packetbeat.flows:
  timeout: 30s
  period: 10s


packetbeat.protocols:

- type: icmp
  enabled: true

- type: dns
  ports: [53]

- type: http
  ports: [80, 5601, 8080, 8081]
  real_ip_header: "X-Forwarded-For"

- type: tls
  ports: [443, 8200]


packetbeat.procs:
  enabled: true
  monitored:

    - process: nginx
      cmdline_grep: nginx

    - process: java
      cmdline_grep: java

    - process: apm-server
      cmdline_grep: apm-server


name: "{{ inventory_hostname }}"
tags: ["{{ env }}", "lightsail"]


processors:

- add_cloud_metadata: ~
- add_host_metadata: ~

- drop_event:
    when:
      or:
        # Exclude pinging metrics
        - equals.path: "/metrics/*"
        # Exclude pinging health
        - equals.path: "/health"


xpack.monitoring.enabled: true


output.elasticsearch:
  hosts: ["{{ elasticsearch_host }}"]
  username: "{{ elasticsearch_user }}"
  password: "{{ elasticsearch_password }}"


setup:
  kibana:
    host: "{{ kibana_host }}"
    username: "{{ elasticsearch_user }}"
    password: "{{ elasticsearch_password }}"
  dashboards.enabled: true

FIX Packetbeat exclusion rules for the new setup
FIX Packetbeat exclusion rules for the new setup
