I would like to achieve to have multiple outputs withing one pipeline but with different content of documents.
OUTPUT FOR CUSTOMER (REDIS QUEUE or LOGSTASH)
- only one field: [@metadata][message][original] with some content
OUTPUT FOR INTERNAL PURPOSES (REDIS QUEUE or LOGSTASH)
- message field
- and additional fields e.g.: hostname, timestamp, event.category, environment.type
I cannot send for customer additional field, only field [@metadata][message][original].
Is it possible to do within one pipeline or is it necessary to use more pipelines for this use case?