Filebeat to logstash multiple indexs

[bob-bza]

Multiple document- types in filebeat

The formatting of your configuration is mangled so I'm not sure exactly what it looks like (always post Filebeat configuration formatted as code), but it seems to be this: filebeat: prospectors: - paths: - "/home/syslog/filebeat/redware/*.log" document_type: syslog paths: - "/home/voip/cdr_StandAloneCluster_01_2016*" document_type: cucm-cdr If that's the case then you're missing a "-" before the second "paths" declaration. See the example at http…

i was looking for this , but forward this to logstash and from there to elasticsearch with multiple index