# Filebeat log to multiple outputs like file and syslog

**URL:** https://discuss.elastic.co/t/filebeat-log-to-multiple-outputs-like-file-and-syslog/335743
**Category:** Beats
**Tags:** filebeat
**Created:** [June 12, 2023, 7:56am UTC](https://discuss.elastic.co/t/filebeat-log-to-multiple-outputs-like-file-and-syslog/335743 "2023-06-12T07:56:27Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)
#### Post date: [June 12, 2023, 10:08am UTC](https://discuss.elastic.co/t/filebeat-log-to-multiple-outputs-like-file-and-syslog/335743/2 "2023-06-12T10:08:16Z")

</div>

Hi @michaelbu,

Multiple outputs for a single running instance of filebeat isn't supported. There is a discussion from 2021 [here](https://github.com/elastic/beats/issues/28925). There is a workaround posted [here](https://discuss.elastic.co/t/configure-file-beat-to-multiple-output/235471) where you can run 2 filebeats each pointing to a different output. Another alternative would be to use Logstash which [does support multiple outputs](https://www.elastic.co/blog/using-logstash-to-split-data-and-send-it-to-multiple-outputs).

For your second question, what do you mean by:

> [@michaelbu](#):
>
> change filebeats log format for syslog logging to json

Have you had a look at the [`syslog` processor](https://www.elastic.co/guide/en/beats/filebeat/current/syslog.html) to see if that does want you want to do?

---

_[View the full topic](https://discuss.elastic.co/t/filebeat-log-to-multiple-outputs-like-file-and-syslog/335743)._