add gelf support to ELK

elk/README.md

@@ -35,3 +35,26 @@ actions:
 $ pip install elasticsearch-curator
 $ curator delete-indices.yml
 ```
+
+## Send container's log to ELK
+
+```nginx
+input {
+  gelf {
+    port => 12201
+  }
+}
+```
+
+```yaml
+test:
+  image: alpine
+  command: 'sh -c "while :; do date; sleep 1; done"'
+  log_driver: gelf
+  log_opt:
+    gelf-address: udp://x.x.x.x:12201
+    tag: test
+```
+
+Search `tag: test` in kibana to show recent logging.
+

elk/data/pipeline/logstash.conf

@@ -2,6 +2,9 @@ input {
   beats {
     port => 5044
   }
+  gelf {
+    port => 12201
+  }
 }
 
 output {

elk/docker-compose.yml

@@ -20,6 +20,7 @@ logstash:
   ports:
     - "5044:5044"
     - "9600:9600"
+    - "12201:12201/udp"
   links:
     - elasticsearch
   volumes: