Hi,
I am running kubernetes using docker as container runtime environment.
I would like to ship container logs via filebeat to elasticsearch for searching and aggregating the information provided by the logs.
If possible, I want to run filebeat as unprivileged user, but docker container logs have following default permissions on my system:
-rw-r-----. 1 root root
Is there a way to set the group to a specific group-id / group name? Then I could put filebeat user to be member of this group and it is able to read the logs.
Thanks, Andreas