I have deployed filebeat as a daemonset configured to ship my logs to logstash. My input in filebeat specifies as /var/log/pods//.log and /var/lib/docker/containers/