Filebeat two diffrent input - one logstash

Good Morning
I have a little problem with filebeat configuration.
I tried use two diffrent inputs in filebeat config file: mqtt and httpjson and pass the results to one logstash instance. This solution isn't work for me. What is the best practice to do them?
I tried use if condition and check tags to create separately indexes for elasticsearch in logstash but it didn't help. I will be very gratefull for any suggestions.

Could you elaborate on this please? What specifically didn't work? What is the end result you are trying to achieve?



Hi. Thank you for your answer. I just need this data in elasticsearch. It may be available from two diffrent indexes. One index for mqtt data and second for httpjson data.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.