# Different output per prospector

**URL:** <https://discuss.elastic.co/t/different-output-per-prospector/64619>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [November 1, 2016, 7:07pm UTC](https://discuss.elastic.co/t/different-output-per-prospector/64619 "2016-11-01T19:07:37Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![danm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/danm/32/12892_2.png) [@danm](https://discuss.elastic.co/u/danm)\
**Post date:** [November 1, 2016, 7:07pm UTC](https://discuss.elastic.co/t/different-output-per-prospector/64619/1 "2016-11-01T19:07:37Z")

</div>

Apologies if this has already been established.

We are using Filebeat in association with our Graylog cluster.

We're shipping multiple files across to Graylog, however one problem we're having is using different 'inputs' in Graylog for each file.  
I can't see any documentation for Filebeat to ship input1 to output1 and input2 to output2, so we can have different files going to different outputs.

Essentially I'm looking to see if it's possible to have an output per prospector input. Is this possible, or is anybody aware of a workaround for this?

Multiple outputs in FIlebeat seem necessary if we want to run a graylog extractor against different log files as they come in to Graylog.

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [November 1, 2016, 7:51pm UTC](https://discuss.elastic.co/t/different-output-per-prospector/64619/2 "2016-11-01T19:51:32Z")

</div>

> I can't see any documentation for Filebeat to ship input1 to output1 and input2 to output2, so we can have different files going to different outputs.

That's not supported.

---

<div class="post-metadata">

**Author:** ![danm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/danm/32/12892_2.png) [@danm](https://discuss.elastic.co/u/danm)\
**Post date:** [November 1, 2016, 8:14pm UTC](https://discuss.elastic.co/t/different-output-per-prospector/64619/3 "2016-11-01T20:14:06Z")

</div>

Oh okay, thanks.

Is there any way around defining extractors for different types of data using the same Graylog input that you know of?

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [November 1, 2016, 8:17pm UTC](https://discuss.elastic.co/t/different-output-per-prospector/64619/4 "2016-11-01T20:17:29Z")

</div>

I know absolutely nothing about Graylog. To me the obvious solution would be use run multiple Filebeat instances.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 22, 2016, 7:07pm UTC](https://discuss.elastic.co/t/different-output-per-prospector/64619/5 "2016-11-22T19:07:40Z")

</div>

This topic was automatically closed after 21 days. New replies are no longer allowed.