Containers (Docker) Inputs

Overview

This input type allows you to specify a set of Docker containers for Edge Delta to monitor.

Note

To have the agent process lines for a specific line separation rule, you need to define a "line_pattern" regex rule.

• When you define a "line_pattern" regex rule, the agent will not process lines for New Line("\n").
  • To learn more, see MultiLine Detection.

Review Sample Configuration 

Review the following sample configuration:

  containers:
    - labels: "nginx,errorcheck"
      include:
        - "image=gitlab/nginx:latest"
    - labels: "billing,billing-ui,errorcheck"
      include:
        - "image=billing-dashboard:.*"
      enable_incoming_line_anomalies: true
    - labels: "errorcheck"
      include:
        - "image=.*"
      auto_detect_line_pattern: true
    - labels: "apache-web"
      include:
      - "name=apache*,image=.*latest$"
      exclude:
        - "image=.*nginx.*"
        - "name=.*nginx.*"
      line_pattern: '^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}'

Review Parameters

Review the following parameters that you can configure in the Edge Delta App.

labels

Required

Enter a descriptive label for this input. 

When you create a workflow, you will use this label to enter your input into the workflow. 

billing,billing-ui,errorcheck is the default label.

Review the following example: 

labels: "apache-web"

include

Optional

Enter the container attributes to include.

To specify which input to add, you must provide include/exclude regex filters.

• All rules in the same line with a comma(",") separated means AND:

   include:
     - "rule-1,rule-2"
  

• All rules under the same part (include/exclude) means OR:

   include:
     - "rule-1"
     - "rule-2"
  

Review the following example: 

include: 
  - "image=gitlab/nginx:latest"

exclude

Optional

Enter the container attributes to exclude.

To specify which input to add, you must provide include/exclude regex filters.

• All rules in the same line with a comma(",") separated means AND:

   exclude:
     - "rule-1,rule-2"
  

• All rules under the same part (include/exclude) means OR:

   exclude:
     - "rule-1"
     - "rule-2"
  

Review the following example: 

exclude: 
  - "image=.*nginx.*" 
  - "name=.*nginx.*"

auto_detect_line_pattern

Optional 

Enter true (or false) to enable auto line detection for log messages with multiple lines. 

Review the following example: 

auto_detect_line_pattern: true

boost_stracktrace_detection

Optional

Enter true (or false) to fallback (troubleshoot) missing content that resulted from the Auto Line Detection parameter. 

Review the following example:

boost_stacktrace_detection: true

filters

Optional 

Enter an existing filter to add to this input. 

To learn how to create a filter, see Filters.

Review the following example: 

filters:
  - info
  - not_trace
  - mask_card
  - mask_password

enable_incoming_line_anomalies

Optional

Enter true or false to generate anomaly scores.  

Review the following example: 

enable_incoming_line_anomalies: true