VPS 4 Deploy Agent
e6a1ab9af5
- Adiciona soc/promtail/config.yml (antes fora do git, em /opt/soc/) - Adiciona soc/grafana/provisioning/alerting/alerts.yml (antes fora do git) - Adiciona soc/grafana/provisioning/datasources/datasources.yml (antes fora do git) - Corrige docker-compose.yml: volumes do Promtail e Grafana agora apontam para paths dentro do repo (/home/deploy/stack/soc/) ao invés de /opt/soc/ - Corrige mount dos containers Docker: host path mapeia para /var/lib/docker/containers (path padrão que o Promtail espera dentro do container) - Corrige .gitignore: ignora apenas dados binários (grafana-data, loki-data, prom-data), não mais todos os subdiretórios do soc/ - Alertas Loki usam count_over_time() para retornar métrica numérica compatível
42 lines
1.3 KiB
YAML
42 lines
1.3 KiB
YAML
server:
|
|
http_listen_port: 9080
|
|
positions:
|
|
filename: /tmp/positions.yaml
|
|
clients:
|
|
- url: http://loki:3100/loki/api/v1/push
|
|
scrape_configs:
|
|
- job_name: falco
|
|
static_configs:
|
|
- targets: [localhost]
|
|
labels:
|
|
job: falco
|
|
__path__: /var/log/falco.log
|
|
|
|
- job_name: varlogs
|
|
static_configs:
|
|
- targets: [localhost]
|
|
labels:
|
|
job: varlogs
|
|
__path__: /var/log/syslog
|
|
|
|
# Coleta logs de todos os containers Docker via service discovery
|
|
- job_name: docker_containers
|
|
docker_sd_configs:
|
|
- host: unix:///var/run/docker.sock
|
|
refresh_interval: 5s
|
|
relabel_configs:
|
|
# Extrai o nome do container (remove a barra inicial)
|
|
- source_labels: ['__meta_docker_container_name']
|
|
regex: '/?(.+)'
|
|
target_label: container
|
|
# Stream (stdout/stderr)
|
|
- source_labels: ['__meta_docker_container_log_stream']
|
|
target_label: stream
|
|
# Nome do serviço do docker-compose
|
|
- source_labels: ['__meta_docker_container_label_com_docker_compose_service']
|
|
target_label: service
|
|
# Caminho do log dentro do container mountado
|
|
- source_labels: ['__meta_docker_container_id']
|
|
target_label: __path__
|
|
replacement: /var/lib/docker/containers/$1/$1-json.log
|