i want to use file beat in 2 server difference to send log from 2 file in each server to 1 server have logstash running on. How i configure in logstash configure file to determine exactly for each file beat then can to handle by grok for each file log?

the events (log lines) sent by filebeat will contain metadata like host and filename. you can use that metadata to create conditionals on logstash to run different grok patterns. filter { if [host] == "host1.local.lan" { grok { .. } } else { grok { .. } } }

Multi filebeat send log to 1 logstash

Elastic Stack Logstash

system (system) Closed January 20, 2017, 10:37am 5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
How to send logs from different files to different logstash? Beats filebeat	2	661	September 1, 2016
Multiple filebeat to one logstash. How to optimize the configuration Logstash	4	2353	December 6, 2019
Logstash to read from multiple server filebeat Logstash	4	1375	March 9, 2018
Several config files for beats in logstash Logstash	5	2799	July 6, 2017
Use filebeat to send different logs in different server Beats filebeat	4	3910	May 7, 2018

Multi filebeat send log to 1 logstash

Related topics