Add docker_log monitoring to telegraf

_ansible/roles/telegraf/templates/telegraf.conf.j2

@@ -18,9 +18,9 @@
 
 [[inputs.prometheus]]
   urls = [
-    {%- for url in svc.prometheus.urls -%}
-		"{{ url }}",
-	{%- endfor -%}
+  {%- for url in svc.prometheus.urls -%}
+    "{{ url }}",
+  {%- endfor -%}
   ]
 
   bearer_token_string = "{{ svc.prometheus.bearer_token }}"
@@ -30,3 +30,11 @@
   ignored_databases = ["postgres", "template0", "template1"]
   prepared_statements = true
 
+[[inputs.docker_log]]
+  endpoint = "{{ svc.docker_log.endpoint }}"
+
+  docker_label_include = [
+    "com.influxdata.telegraf.enable"
+  ]
+
+  source_tag = {{ svc.docker_log.source_tag|lower }}

_ansible/roles/telegraf/vars/main.yml

@@ -18,12 +18,38 @@ svc:
     host: "{{ postgres.host }}"
     port: "{{ postgres.port }}"
     database: "telegraf"
+  docker_log:
+    endpoint: "unix:///var/run/docker.sock"
+    # from_beginning: false
+    # timeout: "5s"
+
+    # container_name_include: []
+    # container_name_exclude: []
+
+    # docker_label_include: []
+    # docker_label_exclude: []
+
+    ## Set the source tag for the metrics to the container ID hostname, eg first 12 chars
+    source_tag: false
+
+    ## Optional TLS Config
+    # tls_ca: "/etc/telegraf/ca.pem"
+    # tls_cert: "/etc/telegraf/cert.pem"
+    # tls_key: "/etc/telegraf/key.pem"
+    ## Use TLS but skip chain & host verification
+    # insecure_skip_verify: false
 
 compose:
   watchtower: false
   image: telegraf:1.28
   volumes:
+    - /var/run/docker.sock:/var/run/docker.sock
     - ./telegraf.conf:/etc/telegraf/telegraf.conf:ro
   file:
+    services:
+      app:
+        user: telegraf
+        group_add:
+        - "972" # docker group on host
     volumes:
       data: