# Configure Input and Modules at the same time for Filebeat

**URL:** https://discuss.elastic.co/t/configure-input-and-modules-at-the-same-time-for-filebeat/266575
**Category:** Beats
**Tags:** filebeat
**Created:** [March 8, 2021, 3:09pm UTC](https://discuss.elastic.co/t/configure-input-and-modules-at-the-same-time-for-filebeat/266575 "2021-03-08T15:09:17Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![Kosodrom](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kosodrom/32/99278_2.png) [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)
#### Post date: [March 8, 2021, 3:09pm UTC](https://discuss.elastic.co/t/configure-input-and-modules-at-the-same-time-for-filebeat/266575/1 "2021-03-08T15:09:17Z")

</div>

Hi,

I have following scenario:

1. One filebeat installation to collect icinga logs. For this I am using [icinga module](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-module-icinga.html)

2. On the same host I have another application's logs, which are located in different path and have different multiline configuration

I do not want to spin up another filebeat to collect the logs from point 2, therefore I have a question:

Am I able to continue harvesting icinga logs using the module **AND** configure another input manually to harvest another application's log files with different multiline pattern.

Thank you

---

<div class="post-metadata">

### Author: ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [March 8, 2021, 3:13pm UTC](https://discuss.elastic.co/t/configure-input-and-modules-at-the-same-time-for-filebeat/266575/2 "2021-03-08T15:13:44Z")

</div>

Hi @Kosodrom

Perhaps take a look at the [live reload feature](https://www.elastic.co/guide/en/beats/filebeat/7.11/_live_reloading.html)

---

<div class="post-metadata">

### Author: ![Kosodrom](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kosodrom/32/99278_2.png) [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)
#### Post date: [March 9, 2021, 9:12am UTC](https://discuss.elastic.co/t/configure-input-and-modules-at-the-same-time-for-filebeat/266575/3 "2021-03-09T09:12:08Z")

</div>

Thanks for the response. I am sorry I do not understand how live reload feature enables me to use a module an a custom input (log for example) at the same time for one filebeat installation?

---

<div class="post-metadata">

### Author: ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [March 9, 2021, 4:22pm UTC](https://discuss.elastic.co/t/configure-input-and-modules-at-the-same-time-for-filebeat/266575/4 "2021-03-09T16:22:03Z")

</div>

Apologies I miss-understood I thought you wanted to add additional logs / paths while filebeat was already running.

If you are simply saying you want to collect multiple types / source of logs on a server with filebeat, yes you absolutely can you just use as many modules you like plus and/ or you can define as many inputs as you like so the answer is yes.

This is very common  
Multiple modules like system and ngnix

and or multiple inputs in the` filebeat.yml` file ... Or all of them together

```
filebeat.inputs:

# Each - is an input. Most options can be set at the input level, so
# you can use different inputs for various configurations.
# Below are the input specific configurations.

- type: log

  # Change to true to enable this input configuration.
  enabled: true

  # Paths that should be crawled and fetched. Glob based paths.
  paths:
    - /var/log/*.log
    #- c:\programdata\elasticsearch\logs\*

  # Exclude lines. A list of regular expressions to match. It drops the lines that are
  # matching any regular expression from the list.
  #exclude_lines: ['^DBG']

...
- type: log

  # Change to true to enable this input configuration.
  enabled: true

  # Paths that should be crawled and fetched. Glob based paths.
  paths:
    - /myother/typesof/logs/*.log

....

# filestream is an experimental input. It is going to replace log input in the future.
- type: filestream

  # Change to true to enable this input configuration.
  enabled: false

  # Paths that should be crawled and fetched. Glob based paths.
  paths:
    - /mystreaming/log/*.log

  # Exclude lines. A list of regular expressions
```

---

<div class="post-metadata">

### Author: ![Kosodrom](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kosodrom/32/99278_2.png) [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)
#### Post date: [March 16, 2021, 2:37pm UTC](https://discuss.elastic.co/t/configure-input-and-modules-at-the-same-time-for-filebeat/266575/5 "2021-03-16T14:37:53Z")

</div>

Thank you. This works perfectly. Somehow I thought that when you use modules, filebeat inputs will be ignored, which is wrong. Thank you

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 13, 2021, 4:38pm UTC](https://discuss.elastic.co/t/configure-input-and-modules-at-the-same-time-for-filebeat/266575/6 "2021-04-13T16:38:06Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
