# Configuring multilple Module logs

**URL:** <https://discuss.elastic.co/t/configuring-multilple-module-logs/107219>\
**Category:** Kibana\
**Created:** [November 10, 2017, 4:51pm UTC](https://discuss.elastic.co/t/configuring-multilple-module-logs/107219 "2017-11-10T16:51:54Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![protocoder](https://avatars.discourse-cdn.com/v4/letter/p/97f17d/32.png) [@protocoder](https://discuss.elastic.co/u/protocoder)\
**Post date:** [November 10, 2017, 4:51pm UTC](https://discuss.elastic.co/t/configuring-multilple-module-logs/107219/1 "2017-11-10T16:51:54Z")

</div>

Hello Experts  
I have multiple system files of various functionalities. Banking.log, transaction.Log, Network.log, Income.log ..  
Please request you to help me clarify the following doubts

1. How can I configure multiple files input to filebeat & logstash
2. How can Kibana differentiate various modules and present in the dashboard, statistics of results of test cases of each module and module differentiation.

Any reference would be really appreciated.

Thanks in advance  
P

---

<div class="post-metadata">

**Author:** ![Stacey\_Gammon](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stacey_gammon/32/14025_2.png) [@Stacey\_Gammon](https://discuss.elastic.co/u/Stacey_Gammon)\
**Post date:** [November 10, 2017, 7:04pm UTC](https://discuss.elastic.co/t/configuring-multilple-module-logs/107219/2 "2017-11-10T19:04:34Z")

</div>

For 1., it looks like you can do this starting in 6.0 with logstash via multiple pipelines configuration - [https://www.elastic.co/guide/en/logstash/6.0/multiple-pipelines.html](https://www.elastic.co/guide/en/logstash/6.0/multiple-pipelines.html)

for 2. Just use different index names in your ingestion configuration. What I've done before is give similar logs a common prefix so I have the option to view all, or a subset. So I have the following indexes: `network-packetbeat`, `network-firewall`, `network-tcpdump`, and try to set them up with the same field names so I can view data across them.

---

<div class="post-metadata">

**Author:** ![protocoder](https://avatars.discourse-cdn.com/v4/letter/p/97f17d/32.png) [@protocoder](https://discuss.elastic.co/u/protocoder)\
**Post date:** [November 10, 2017, 7:37pm UTC](https://discuss.elastic.co/t/configuring-multilple-module-logs/107219/3 "2017-11-10T19:37:49Z")

</div>

Thank you Stacey.  
So I have to change entire code and add the module and test case name in the every print file ? Please confirm, if that is what you meant. Thank you.

---

<div class="post-metadata">

**Author:** ![Stacey\_Gammon](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stacey_gammon/32/14025_2.png) [@Stacey\_Gammon](https://discuss.elastic.co/u/Stacey_Gammon)\
**Post date:** [November 10, 2017, 7:45pm UTC](https://discuss.elastic.co/t/configuring-multilple-module-logs/107219/4 "2017-11-10T19:45:14Z")

</div>

> I have to change entire code and add the module and test case name in the every print file

I'm actually not sure what you mean by this. When I was started to track my data, I only had to add some configuration options to pipelines.yml, to point to a couple different files. In those files, I specified an index pattern. I didn't change any code - just configuration files. I'm not sure what you mean by `print file` or `test case name`.

You also may want to move this question to the logstash channel, if you are asking questions about the configuration options.

---

<div class="post-metadata">

**Author:** ![protocoder](https://avatars.discourse-cdn.com/v4/letter/p/97f17d/32.png) [@protocoder](https://discuss.elastic.co/u/protocoder)\
**Post date:** [November 10, 2017, 8:33pm UTC](https://discuss.elastic.co/t/configuring-multilple-module-logs/107219/5 "2017-11-10T20:33:32Z")

</div>

Thank you Stacey. I will try this and get back. ( Code change for log file print, I meant) you have answered it. Thank you

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 8, 2017, 8:33pm UTC](https://discuss.elastic.co/t/configuring-multilple-module-logs/107219/6 "2017-12-08T20:33:55Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.