# Filebeat two diffrent input - one logstash
**URL:** https://discuss.elastic.co/t/filebeat-two-diffrent-input-one-logstash/256353
**Category:** Beats
**Tags:** filebeat
**Created:** [November 23, 2020, 12:45pm UTC](https://discuss.elastic.co/t/filebeat-two-diffrent-input-one-logstash/256353 "2020-11-23T12:45:56Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@langol93](https://discuss.elastic.co/u/langol93)
#### Post date: [November 23, 2020, 12:45pm UTC](https://discuss.elastic.co/t/filebeat-two-diffrent-input-one-logstash/256353/1 "2020-11-23T12:45:57Z")
Good Morning
I have a little problem with filebeat configuration.
I tried use two diffrent inputs in filebeat config file: mqtt and httpjson and pass the results to one logstash instance. This solution isn't work for me. What is the best practice to do them?
I tried use if condition and check tags to create separately indexes for elasticsearch in logstash but it didn't help. I will be very gratefull for any suggestions.
---
### Author:  [@shaunak](https://discuss.elastic.co/u/shaunak)
#### Post date: [November 24, 2020, 1:03am UTC](https://discuss.elastic.co/t/filebeat-two-diffrent-input-one-logstash/256353/2 "2020-11-24T01:03:33Z")
> [@langol93](#):
>
> This solution isn't work for me
Could you elaborate on this please? What specifically didn't work? What is the end result you are trying to achieve?
Thanks,
Shaunak
---
### Author:  [@langol93](https://discuss.elastic.co/u/langol93)
#### Post date: [November 24, 2020, 8:21am UTC](https://discuss.elastic.co/t/filebeat-two-diffrent-input-one-logstash/256353/3 "2020-11-24T08:21:40Z")
Hi. Thank you for your answer. I just need this data in elasticsearch. It may be available from two diffrent indexes. One index for mqtt data and second for httpjson data.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 22, 2020, 10:21am UTC](https://discuss.elastic.co/t/filebeat-two-diffrent-input-one-logstash/256353/4 "2020-12-22T10:21:48Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.