Hello, here's our current setup:
Multiple filebeats on a single VM (hundreds of VMs - Linux & windows based)
Each filebeat scrapes from a unique path, sends to unique output (logstash endpoints)
Metricbeat on each of those VMs
We explored Elastic Agent, but couldn't find a way to replace ALL filebeats on a VM with one single agent when managed through Fleet. It's because each agent can be assigned to one policy, and one policy seems to have only one output as endpoint.
Is it possible to have multiple inputs & multiple outputs through Elastic Agent, managed by Fleet? If so, any pointers will be helpful.
It appears to have elastic agent installed, we MUST have sudo access (root level). Is there a way we can get this done without the sudo access?
We checked with standalone agent, and that appears to be working - but want this to be managed through Fleet instead for centralized management.
Thanks for your time!