edit

container/conf/elastic/elasticsearch/elasticsearch.yml

@@ -88,4 +88,5 @@ http.port: 9200
 #action.destructive_requires_name: true
 
 ### xpack in alpine
-xpack.ml.enabled: false
+xpack.ml.enabled: false
+xpack.security.enabled: false

container/conf/elastic/filebeat/filebeat.yml

@@ -19,7 +19,9 @@ filebeat.prospectors:
 
   # Paths that should be crawled and fetched. Glob based paths.
   paths:
-    - /root/filebeat/*.log
+    - "/root/nginx/*.log"
+    - "/root/docker/*/*.log"
+    - "/root/php7/*.log"
     #- c:\programdata\elasticsearch\logs\*
 
   # Exclude lines. A list of regular expressions to match. It drops the lines that are

src/docker/conf/elk.conf

@@ -20,7 +20,7 @@ volumes = {container}conf/elastic/logstash:/usr/local/logstash/config
 command = logstash
 
 [filebeat]
-volumes = {container}conf/elastic/filebeat:/usr/local/filebeat/config,{container}logs/nginx/web-nginx/logs:/root/filebeat
+volumes = {container}conf/elastic/filebeat:/usr/local/filebeat/config,{container}logs/nginx/web-nginx/logs:/root/nginx,/var/lib/docker/containers:/root/docker,{container}conf/web/php7/log:/root/php7
 command = filebeat
 
 [kibana]