Filebeat: send to multiple logstashes instances?

Dear community,
is there some kind of trick / best practice if you want in filebeat to sent to multiple logstash putput instances? I know there is some limitation in place by libbeat, but perhaps there is something you can do about it whithout the need for 2 filebeats running in place.
Thanks and cheers!

Since filebeat only supports one output you will need something externally to do it.

You could use Kafka and configure Filebeat to send the logs do Kafka, then you would use the Kafka input in your logstash instances.

Or you could send the logs to one intermediary Logstash that would redirect the logs to the other logstash instances.

1 Like