# Beats vs multiple outputs while transisting to a new elastic cluster

**URL:** https://discuss.elastic.co/t/beats-vs-multiple-outputs-while-transisting-to-a-new-elastic-cluster/341799
**Category:** Beats
**Tags:** filebeat
**Created:** [August 28, 2023, 11:55am UTC](https://discuss.elastic.co/t/beats-vs-multiple-outputs-while-transisting-to-a-new-elastic-cluster/341799 "2023-08-28T11:55:08Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![stefws](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stefws/32/6442_2.png) [@stefws](https://discuss.elastic.co/u/stefws)
#### Post date: [August 28, 2023, 11:55am UTC](https://discuss.elastic.co/t/beats-vs-multiple-outputs-while-transisting-to-a-new-elastic-cluster/341799/1 "2023-08-28T11:55:08Z")

</div>

Running a PoC with filebeat + metricbeat agents on a number of endpoints sending data through ingest nodes running various pipelines on the filebeat events.

While preparing move to a new elastic cluster, we would like to duplicate events, so they still hit our PoC cluster and the newly prepared coming production cluster, and thus have events send to both clusters. Would this be possible somehow?

Comming Production Cluster also have a Logstash setup, which we might parse data through (without any processing) is beats can be configured to send data to two outputs, a logstash as well as an elastic output.

TIA

---

<div class="post-metadata">

### Author: ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)
#### Post date: [August 28, 2023, 12:35pm UTC](https://discuss.elastic.co/t/beats-vs-multiple-outputs-while-transisting-to-a-new-elastic-cluster/341799/2 "2023-08-28T12:35:17Z")

</div>

> [@stefws](#):
>
> is beats can be configured to send data to two outputs, a logstash as well as an elastic output.

Unfortunately no, beats only supports one output.

If you want to send the same data from beats to different clusters you will need to send it to logstash and have logstash send the data to the different clusters.

Or send it to kafka and use Logstash to consume and send the data to the different clusters.

---

<div class="post-metadata">

### Author: ![stefws](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stefws/32/6442_2.png) [@stefws](https://discuss.elastic.co/u/stefws)
#### Post date: [August 29, 2023, 9:56pm UTC](https://discuss.elastic.co/t/beats-vs-multiple-outputs-while-transisting-to-a-new-elastic-cluster/341799/3 "2023-08-29T21:56:42Z")

</div>

Right, thanks, will try to proxy through logstash, also believe I did this in the past when I used two different ES clusters for different data through same logstash instances,

Also seen in this [older thread](https://discuss.elastic.co/t/sending-logstash-data-to-multiple-elastic-instances-clusters/54482) or try to read [this article](https://www.elastic.co/blog/using-logstash-to-split-data-and-send-it-to-multiple-outputs) though it's more on splitting than duplicating.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 26, 2023, 11:56pm UTC](https://discuss.elastic.co/t/beats-vs-multiple-outputs-while-transisting-to-a-new-elastic-cluster/341799/4 "2023-09-26T23:56:45Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
