Filebeat log to multiple outputs like file and syslog

Hi @michaelbu,

Multiple outputs for a single running instance of filebeat isn't supported. There is a discussion from 2021 here. There is a workaround posted here where you can run 2 filebeats each pointing to a different output. Another alternative would be to use Logstash which does support multiple outputs.

For your second question, what do you mean by:

Have you had a look at the syslog processor to see if that does want you want to do?