# Conditional output

**URL:** <https://discuss.elastic.co/t/conditional-output/47014>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [April 11, 2016, 4:09pm UTC](https://discuss.elastic.co/t/conditional-output/47014 "2016-04-11T16:09:57Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![canadatom](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/canadatom/32/9060_2.png) [@canadatom](https://discuss.elastic.co/u/canadatom)\
**Post date:** [April 11, 2016, 4:09pm UTC](https://discuss.elastic.co/t/conditional-output/47014/1 "2016-04-11T16:09:57Z")

</div>

I am trying to use prospector to include some log patterns and output it to file, and another prospector filter to include some other log patterns and output to logstash, is this doable?

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [April 12, 2016, 5:35am UTC](https://discuss.elastic.co/t/conditional-output/47014/2 "2016-04-12T05:35:29Z")

</div>

I think you need to run two instances of Filebeat for this.

---

<div class="post-metadata">

**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\
**Post date:** [April 12, 2016, 4:19pm UTC](https://discuss.elastic.co/t/conditional-output/47014/3 "2016-04-12T16:19:39Z")

</div>

filebeat stores file-state meta-data globally in registry file. These 2 prospectors will be in conflict. Rather have 2 filebeat instances configured in this case (or use logstash for filtering/routing events).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 9:53pm UTC](https://discuss.elastic.co/t/conditional-output/47014/4 "2017-07-05T21:53:24Z")

</div>


