Multiple file inputs as sources

Elastic Stack Beats
1

I want to ingest 2 different log files from filebeat to logstash. I have the below configuration for filebeat. I am using 6.3 version of ELK so don't worry about the path of file. Filebeat will take C:\data\log\eis.log. I also tried with different combination of paths like

 paths:
        - C:\data\log\eis.log, C:\data\log\sa.log

Below is a complete configuration kindly help.

    filebeat.config.modules:
      path: ${path.config}/modules.d/*.yml
      reload.enabled: false

    setup.template.settings:
      index.number_of_shards: 0

    filebeat.inputs:

    - type: log
      enabled: true
      paths:
        - C:\data\log\eis.log
      fields: {log_type: eis}

    - type: log
      enabled: true
      paths:
        - C:\data\log\sa.log
      fields: {log_type: sa}
     
    output.file:
       path: "c:/var/"
       filename: "filebeat.log"

I have already asked this question in this forum without much success at Multiple input configuration. So experts please take a look.

2

The file sa.log was saved as sa.txt.log I spent a whole half a day just to figure out this ...

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.