From 33b25f16462dfa2895f01ec68318828b6f3476b7 Mon Sep 17 00:00:00 2001
From: Natalia Serrano <natalia.serrano@qindel.com>
Date: Fri, 11 Jul 2025 10:56:30 +0200
Subject: [PATCH] refs #2446 #2447 install filebeat, add config template

---
 CHANGELOG.md                                  |  6 ++++
 includes/etc/filebeat/filebeat.yml            | 28 +++++++++++++++++++
 .../etc/initramfs-tools/scripts/VERSION.txt   |  2 +-
 mkoglive.cfg                                  |  2 +-
 4 files changed, 36 insertions(+), 2 deletions(-)
 create mode 100644 includes/etc/filebeat/filebeat.yml

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 608a22c..2f0bad8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.11.0] - 2025-07-11
+
+### Added
+
+- Install filebeat
+
 ## [3.10.1] - 2025-07-03
 
 ### Changed
diff --git a/includes/etc/filebeat/filebeat.yml b/includes/etc/filebeat/filebeat.yml
new file mode 100644
index 0000000..de987c7
--- /dev/null
+++ b/includes/etc/filebeat/filebeat.yml
@@ -0,0 +1,28 @@
+filebeat.inputs:
+- type: log
+  enabled: true
+  paths:
+    - /var/log/opengnsys.json.log
+
+setup.template.settings:
+  index.number_of_shards: 1
+
+output.elasticsearch:
+  hosts: ["__OGLOG_IP__:__OGLOG_PORT__"]
+  pipeline: "copy-message-pipeline"
+  username: "filebeat_writer"
+  password: "__OPENSEARCH_PASSWORD__"
+  protocol: "https"
+  ssl.enabled: true
+  ssl.verification_mode: none
+  #ssl.certificate: "/opt/opengnsys/etc/filebeat.crt.pem"
+  #ssl.key: "/opt/opengnsys/etc/filebeat.key.pem"
+
+processors:
+  - add_host_metadata:
+      when.not.contains.tags: forwarded
+  - add_cloud_metadata: ~
+  - add_docker_metadata: ~
+  - add_kubernetes_metadata: ~
+
+seccomp.enabled: false
diff --git a/includes/etc/initramfs-tools/scripts/VERSION.txt b/includes/etc/initramfs-tools/scripts/VERSION.txt
index a41235d..cb8d090 100644
--- a/includes/etc/initramfs-tools/scripts/VERSION.txt
+++ b/includes/etc/initramfs-tools/scripts/VERSION.txt
@@ -1 +1 @@
-OpenGnsys Client 3.10.1
+OpenGnsys Client 3.11.0
diff --git a/mkoglive.cfg b/mkoglive.cfg
index 3d2bd87..b56b62a 100644
--- a/mkoglive.cfg
+++ b/mkoglive.cfg
@@ -131,7 +131,7 @@ xwindows =
   #roxterm gparted       #+80M
   #openbox midori        #xvesa en compilacion
 
-ogagent = stunnel4
+ogagent = stunnel4 filebeat
 
 ogbrowser = sway libinput-tools hwdata ogbrowser