Filebeat-FIPS is a FIPS 140-2 compliant log file shipper for enterprise environments. This container provides secure log data collection and forwarding capabilities while maintaining compliance with federal security standards. It features automated log harvesting, secure data transmission, and integration with major log analytics platforms.
Core capabilities and strengths of this container
Typical scenarios where this container excels
Download the container image from the registry
docker pull clnstrt-images.cleanstart.com/$ORGANIZATION/filebeat-fips:latestdocker pull clnstrt-images.cleanstart.com/$ORGANIZATION/filebeat-fips:latest-devRun the container with basic configuration
docker run -d \
--name filebeat-fips \
-v $(pwd)/filebeat.yml:/usr/share/filebeat/filebeat.yml \
clnstrt-images.cleanstart.com/$ORGANIZATION/filebeat-fips:latestDeploy with production security settings
docker run -d --name filebeat-fips-prod \
--read-only \
--security-opt=no-new-privileges \
--user 1000:1000 \
-v $(pwd)/filebeat.yml:/usr/share/filebeat/filebeat.yml:ro \
-v $(pwd)/logs:/logs:ro \
clnstrt-images.cleanstart.com/$ORGANIZATION/filebeat-fips:latestMount log directories for monitoring
docker run -d \
-v /var/log:/logs:ro \
-v $(pwd)/filebeat.yml:/usr/share/filebeat/filebeat.yml:ro \
clnstrt-images.cleanstart.com/$ORGANIZATION/filebeat-fips:latestConfigure network ports for monitoring
docker run -d \
-p 5066:5066 \
clnstrt-images.cleanstart.com/$ORGANIZATION/filebeat-fips:latestConfiguration options available through environment variables
localhost:9200elasticlocalhost:5601Recommended security configurations and practices
Recommended security context for Kubernetes deployments
securityContext:
runAsNonRoot: true
runAsUser: 1000
runAsGroup: 1000
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
capabilities:
drop: ["ALL"]
add: ["NET_BIND_SERVICE"]Essential links and resources for further information