Adding support for CentOS/Redhat

files/elastic.repo

@@ -0,0 +1,8 @@
+[elastic-5.x]
+name=Elastic repository for 5.x packages
+baseurl=https://artifacts.elastic.co/packages/5.x/yum
+gpgcheck=1
+gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
+enabled=1
+autorefresh=1
+type=rpm-md

manifests/package.pp

@@ -21,6 +21,24 @@
         ensure => present,
       }
     }
+    'RedHat': {
+      exec { 'Import Elastic GPG key':
+        command => '/bin/rpm --import https://packages.elastic.co/GPG-KEY-elasticsearch',
+        cwd     => '/etc/pki/rpm-gpg',
+	unless  => '/bin/rpm -qi GPG-KEY-elasticsearch',
+        before  => File['elastic-5.x repo'],
+      }
+      file { 'elastic-5.x repo':
+        ensure => 'present',
+        path   => '/etc/yum.repos.d/elastic.repo',
+	owner  => 'root',
+	group  => 'root',
+	source => 'puppet:///modules/filebeats/elastic.repo',
+      }
+      package {'filebeat':
+        ensure => present,
+      }
+    }
     default: {
       fail('Could not configure apt resource for elasticsearch filebeats')
     }

manifests/params.pp

@@ -29,6 +29,10 @@
       $export_log_paths = ['/var/log/*.log']
       $config_path      = '/etc/filebeat'
     }
+    'RedHat': {
+      $export_log_paths = ['/var/log/*.log']
+      $config_path      = '/etc/filebeat'
+    }
     default: {
       fail('Could not determine default params for your Operating System')
     }

templates/filebeat.yml.erb

@@ -1,17 +1,19 @@
 filebeat:
   prospectors:
 <% @prospectors_array.each do | prospector | -%>
-    -
+<% if prospector['input_type'] -%>
+    - input_type: <%= prospector['input_type'] %>
+<% end -%>
       paths:
 <% prospector['paths'].each do |path| -%>
         - <%= path %>
 <% end -%>
-<% if prospector['input_type'] -%>
-      input_type: <%= prospector['input_type'] %>
-<% end -%>
 <% if prospector['doc_type'] != '' -%>
       document_type: <%= prospector['doc_type'] %>
 <% end -%>
+<% if prospector['tags'] -%>
+      tags: [<%= prospector['tags'].map{|tag| "#{tag}"}.join(',') %>]
+<% end -%>
 <% if prospector['include_lines'] -%>
       include_lines: <%= prospector['include_lines'] %>
 <% end -%>
@@ -20,12 +22,19 @@ filebeat:
 <% end -%>
 <% if prospector['fields'] -%>
       fields:
-  <% prospector['fields'].each do |field| -%>
-        <%= field.keys[0] %>: <%= field.values[0] %>
-  <% end -%>
+  <%- prospector['fields'].each do |k,v| -%>
+        <%= k %>: '<%= v %>'
+  <%- end -%>
+<% end -%>
+<% if @json_message_key != '' -%>
+      # Parse each line as JSON
+      json.message_key: <%= prospector['json_message_key'] %>
+<% end -%>
+<% if @json_keys_under_root != '' -%>
+      json.keys_under_root: <%= prospector['json_keys_under_root'] %>
 <% end -%>
 <% end -%>
-  registry_file: /var/lib/filebeat/registry
+registry_file: /var/lib/filebeat/registry
 output:
 <% if @logstash_hosts != [] -%>
   logstash: