Multiple config file

[Mohammad.ali]

Hello everyone
i have a simple filebeat.yml which send some log from specific path to logstash
my problem is how can i activate some filebeat modules such as system on this host while the output of filebeat.yml is logstash and the modules used elasticsearch as output??
should i config multiple config file for this purpose?or should i have create multiple filebeat service ?

[Tek_Chand]

@Mohammad.ali,

Which version are you using? Yes, you can use filebeat modules with logstash output. You need to use logstash pipeline for parsing. Please refer the below documentation:

Logstash pipeline for parsing

Thanks.

[Mohammad.ali]

Thanks for reply...right now iam using 7.3.0
so when the output of filebeat.yml is defined to logstash any activated filebeat modules send their log to logstash ?and for this purpose i can use the link you sent me,,am i right?

[Tek_Chand]

@Mohammad.ali,

For 7.3.0 you can refer below document:
Logstash pipeline for parsing

@Mohammad.ali

so when the output of filebeat.yml is defined to logstash any activated filebeat modules send their log to logstash ?and for this purpose i can use the link you sent me,,am i right?

Yes...document is saying this. But i did not use this. Currently i am using 6.4.0. There is slightly difference between both version. But i follow same procedure in 6.4.0. So it should work in 7.3.0 also and document is saying that.

Please read the document.

Thanks.