# Filebeat: send to multiple logstashes instances?

**URL:** <https://discuss.elastic.co/t/filebeat-send-to-multiple-logstashes-instances/319078>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [November 16, 2022, 12:37pm UTC](https://discuss.elastic.co/t/filebeat-send-to-multiple-logstashes-instances/319078 "2022-11-16T12:37:57Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![smm](https://avatars.discourse-cdn.com/v4/letter/s/bb73d2/32.png) [@smm](https://discuss.elastic.co/u/smm)\
**Post date:** [November 16, 2022, 12:37pm UTC](https://discuss.elastic.co/t/filebeat-send-to-multiple-logstashes-instances/319078/1 "2022-11-16T12:37:57Z")

</div>

Dear community,  
is there some kind of trick / best practice if you want in filebeat to sent to multiple logstash putput instances? I know there is some limitation in place by libbeat, but perhaps there is something you can do about it whithout the need for 2 filebeats running in place.  
Thanks and cheers!

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [November 16, 2022, 3:04pm UTC](https://discuss.elastic.co/t/filebeat-send-to-multiple-logstashes-instances/319078/2 "2022-11-16T15:04:59Z")

</div>

Since filebeat only supports one output you will need something externally to do it.

You could use Kafka and configure Filebeat to send the logs do Kafka, then you would use the Kafka input in your logstash instances.

Or you could send the logs to one intermediary Logstash that would redirect the logs to the other logstash instances.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 14, 2022, 5:05pm UTC](https://discuss.elastic.co/t/filebeat-send-to-multiple-logstashes-instances/319078/3 "2022-12-14T17:05:53Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
