Metricbeat -> Filebeat -> Logstash

Please take a look at the similar thread: Output to multiple indexes straight from filebeat.yml?