Conditional output


(Canadatom) #1

I am trying to use prospector to include some log patterns and output it to file, and another prospector filter to include some other log patterns and output to logstash, is this doable?


(Magnus B├Ąck) #2

I think you need to run two instances of Filebeat for this.


(Steffen Siering) #3

filebeat stores file-state meta-data globally in registry file. These 2 prospectors will be in conflict. Rather have 2 filebeat instances configured in this case (or use logstash for filtering/routing events).


(system) #4