Configure many outputs for filebeat

I want to be able to configure multiple outputs for the filebeat. FIlebeat sends appropriate file to a configured output. What i mean is

Filebeat sends the content of File A to the configured elastic search output on IP address and port

Filebeat sends the content of File B to the configured logstash output on IP address and port

file A - [output.elasticsearch] on 192.1.2.1:3900
file B - [output.logstash] on 182.4.5.1:2001

Unfortunately only a single output may be defined in the current version of Filebeat.

In your case, you might want to send both to Logstash, and then handle the various outputs there? You could just pass through the file A one without passing through any filters, maybe?

Alternatively you might look into running two separate Filebeat instances. This is what I'm currently examining for my setup.

Thanks BennyInc

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.