How to output Filebeat logs to multiple hosts without load balancing?

(Abimael) #1

Hello. I'm trying to send all the logs to multiple hosts, each host should receive all the logs being read by Filebeat. Is there a way to do this without having one Filebeat Service per host with a specific configuration. Please note that I don't want to load balance the logs. I'm trying to study the same logs on two different systems. Thanks for the help!

(ruflin) #2

Is the following what you are looking for?

(Abimael) #3

Thanks, this looks like it is what I need.

I'm sending logs to a logstash server and to a graylog server.

Then in my filebeat.yml I can have something like this:

    ### Logstash as output
        # The Logstash Development hosts
        hosts: [""]
        # The Logstash Production hosts
        hosts: [""]

Does that looks good? @ruflin

(ruflin) #4

The issue I sent was opened 7 days ago and is only in a discussion phase. There is nothing implemented or decided yet.

(Abimael) #5

@ruflin thanks for the quick reply. I will then follow the conversations of the issue.


(Steffen Siering) #6

Also check my reply why I think it's actually a bad idea to have filebeat output to dev and production logstash at the same time.

(Abimael) #7

@steffens thanks I will look into it. I appreciate your time!

(system) #8