Can filebeat be configured to send to different ES or logstash servers?


#1

I have a request to send Database logs to one ES server and tomcat logs to another ES server. Can this be configured in filebeat version 1.1.0-1 ?


Can filebeat send to different LS servers based on hostname criteria
Can filebeat send to different LS servers based on hostname criteria
(ruflin) #2

Filebeat can connect to multiple elasticsearch hosts (which are assumed to be long to one cluster) but it cannot route your data dependent on the log file. If the logs should be sent to different clusters it is currently best to start two filebeat instances.


(Mark Walkom) #3

Or send them to LS and let it do the splitting.


(system) #4