Remove filebeat from linux packages (#326)

* Remove filebeat from linux packages

Linux users should install their collectors from elastic

* Also remove filebeat path from built-in default

* Don't create spooldir for nxlog

* Extend whitelist to include beats binarys

The wrapper scripts have hardcoded paths, that we cannot overwrite
with the configuration.

Author: mpfz0r

cfgfile/schema.go

@@ -48,12 +48,18 @@ log_rotate_max_file_size: "10MiB"
 log_rotate_keep_files: 10
 collector_configuration_directory: "/var/lib/graylog-sidecar/generated"
 collector_binaries_whitelist:
-  - "/usr/lib/graylog-sidecar/filebeat"
   - "/usr/bin/filebeat"
   - "/usr/bin/packetbeat"
   - "/usr/bin/metricbeat"
   - "/usr/bin/heartbeat"
   - "/usr/bin/auditbeat"
+  - "/usr/bin/journalbeat"
+  - "/usr/share/filebeat/bin/filebeat"
+  - "/usr/share/packetbeat/bin/packetbeat"
+  - "/usr/share/metricbeat/bin/metricbeat"
+  - "/usr/share/heartbeat/bin/heartbeat"
+  - "/usr/share/auditbeat/bin/auditbeat"
+  - "/usr/share/journalbeat/bin/journalbeat"
   - "/opt/nxlog/bin/nxlog"
 `
 

dist/fetch_collectors.sh

@@ -40,7 +40,6 @@ download_beat()
 
 for ARCH in "${ARCHS[@]}"
 do
-  download_beat "filebeat" "linux" ${FILEBEAT_VERSION} ${ARCH}
   download_beat "filebeat" "windows" ${FILEBEAT_VERSION} ${ARCH}
   download_beat "winlogbeat" "windows" ${WINLOGBEAT_VERSION} ${ARCH}
 done

dist/recipe.rb

@@ -24,11 +24,9 @@ def build
 
   def install
     bin.install 'graylog-sidecar'
-    lib('graylog-sidecar').install '../../collectors/filebeat/linux/x86_64/filebeat'
     etc('graylog/sidecar').install '../../../sidecar-example.yml', 'sidecar.yml'
     var('lib/graylog-sidecar/generated').mkdir
     var('log/graylog-sidecar').mkdir
     var('run/graylog-sidecar').mkdir
-    var('spool/graylog-sidecar/nxlog').mkdir
   end
 end

dist/recipe32.rb

@@ -24,11 +24,9 @@ def build
 
   def install
     bin.install 'graylog-sidecar'
-    lib('graylog-sidecar').install '../../collectors/filebeat/linux/x86/filebeat'
     etc('graylog/sidecar').install '../../../sidecar-example.yml', 'sidecar.yml'
     var('lib/graylog-sidecar/generated').mkdir
     var('log/graylog-sidecar').mkdir
     var('run/graylog-sidecar').mkdir
-    var('spool/graylog-sidecar/nxlog').mkdir
   end
 end

sidecar-example.yml

@@ -71,10 +71,16 @@ server_api_token: ""
 #
 # Default:
 # collector_binaries_whitelist:
-#  - "/usr/lib/graylog-sidecar/filebeat"
 #  - "/usr/bin/filebeat"
 #  - "/usr/bin/packetbeat"
 #  - "/usr/bin/metricbeat"
 #  - "/usr/bin/heartbeat"
 #  - "/usr/bin/auditbeat"
+#  - "/usr/bin/journalbeat"
+#  - "/usr/share/filebeat/bin/filebeat"
+#  - "/usr/share/packetbeat/bin/packetbeat"
+#  - "/usr/share/metricbeat/bin/metricbeat"
+#  - "/usr/share/heartbeat/bin/heartbeat"
+#  - "/usr/share/auditbeat/bin/auditbeat"
+#  - "/usr/share/journalbeat/bin/journalbeat"
 #  - "/opt/nxlog/bin/nxlog"