# Filebeat output setting on modules

**URL:** <https://discuss.elastic.co/t/filebeat-output-setting-on-modules/243669>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [August 4, 2020, 8:18am UTC](https://discuss.elastic.co/t/filebeat-output-setting-on-modules/243669 "2020-08-04T08:18:42Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![esseti](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/esseti/32/8383_2.png) [@esseti](https://discuss.elastic.co/u/esseti)\
**Post date:** [August 4, 2020, 8:18am UTC](https://discuss.elastic.co/t/filebeat-output-setting-on-modules/243669/1 "2020-08-04T08:18:42Z")

</div>

Hello all,  
I've two system one ELK for monitoring (Monitoring) and an ELK for auditing (Auditing)

On a machine, i've setup filebeat to send the output to Monitoring. that's fine.  
Now,I 've to setup a filebaeat conf that for a specific file (called audit.log) the data are sent to the Auditing ELK, specifically to logstash, and not to the Monitoring.  
So, in the end i've that all filebeat data are sent to Monitoring execpt audit.log that is sent to Auditing.

Is there a way to configure a module to read a file and send it to a specific output?  
or what should be the approach for me?

---

<div class="post-metadata">

**Author:** ![MarianaD](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marianad/32/42687_2.png) [@MarianaD](https://discuss.elastic.co/u/MarianaD)\
**Post date:** [August 4, 2020, 11:33am UTC](https://discuss.elastic.co/t/filebeat-output-setting-on-modules/243669/2 "2020-08-04T11:33:24Z")

</div>

hi @esseti, unfortunately, running multiple outputs in Filebeat is not supported.  
As a workaround you could run two instances of it with the appropriate output configuration.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 1, 2020, 1:33pm UTC](https://discuss.elastic.co/t/filebeat-output-setting-on-modules/243669/3 "2020-09-01T13:33:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.