"I have two Filebeat configuration files

I have two Filebeat configuration files — filebeat-elastic.yml (with Elasticsearch output) and filebeat-kafka.yml (with Kafka output). I need to run both configurations simultaneously as long-running services using systemctl start filebeat.service. Please advise how to configure this setup or suggest an alternative approach to run both configurations

Is it on Linux or Windows or docker or...?

You need to create a new systemd service pointing to your other configuration and using a different data path as well.

You can copy the filebeat.service systemd file and edit it.

1 Like