Multiple config file

Elastic Stack Beats
1

Hello everyone
i have a simple filebeat.yml which send some log from specific path to logstash
my problem is how can i activate some filebeat modules such as system on this host while the output of filebeat.yml is logstash and the modules used elasticsearch as output??
should i config multiple config file for this purpose?or should i have create multiple filebeat service ?

2

@Mohammad.ali,

Which version are you using? Yes, you can use filebeat modules with logstash output. You need to use logstash pipeline for parsing. Please refer the below documentation:

Logstash pipeline for parsing

Thanks.

3

Thanks for reply...right now iam using 7.3.0
so when the output of filebeat.yml is defined to logstash any activated filebeat modules send their log to logstash ?and for this purpose i can use the link you sent me,,am i right?

4

@Mohammad.ali,

For 7.3.0 you can refer below document:
Logstash pipeline for parsing

Yes...document is saying this. But i did not use this. Currently i am using 6.4.0. There is slightly difference between both version. But i follow same procedure in 6.4.0. So it should work in 7.3.0 also and document is saying that.

Please read the document.

Thanks.