warning: those are probably some newbie questions.
Context: wanting to filebeat some files to ES with ingest pipelines, and IIS logs, from differents files on the same machine.
Are the main configuration from filebeat.yml, and config from IIS module, cleanly isolated ? (example: output.elasticsearch.pipeline and output.elasticsearch.index)
Do I have to make a custom module, one per application ? Is it recommended ?
Modules can be considered as isolated, separated threads ? Is the main config file, can be considered as a module in itself ?
Thanks a lot