ARG ELK_VERSION # https://github.com/elastic/logstash-docker FROM docker.elastic.co/logstash/logstash:${ELK_VERSION} # USER root # RUN groupmod -g 1002 logstash # RUN usermod -u 1002 -g 1002 logstash # RUN chown -R logstash /usr/share/logstash # RUN sed -i -e 's/--userspec=1000/--userspec=1002/g' \ # -e 's/UID 1000/UID 1002/' \ # -e 's/chown -R 1000/chown -R 1002/' /usr/local/bin/docker-entrypoint # RUN chown logstash /usr/local/bin/docker-entrypoint # USER 1002:1002 # Add your logstash plugins setup here # Example: RUN logstash-plugin install logstash-filter-json RUN logstash-plugin update logstash-input-beats RUN logstash-plugin update logstash-filter-grok