Setup journalbeat.

Pretend it's filebeat, so the logs in Kibana are unified.

docker-compose.yml

@@ -43,6 +43,19 @@ services:
     links: *beat_links
     restart: on-failure
 
+  journalbeat_setup:
+    command: >
+      journalbeat setup
+      -E output.elasticsearch.hosts=['elasticsearch:9200']
+      -E output.elasticsearch.index='filebeat-%{[agent.version]}-%{+yyyy.MM.dd}'
+      -E setup.kibana.host=kibana:5601
+      -E setup.ilm.overwrite=true
+      -E setup.template.name='filebeat-%{[agent.version]}'
+      -E setup.template.pattern='filebeat-%{[agent.version]}-%{+yyyy.MM.dd}'
+    image: docker.elastic.co/beats/journalbeat-oss:7.12.1
+    links: *beat_links
+    restart: on-failure
+
   kibana:
     environment:
       ELASTICSEARCH_HOSTS: |