Multiple Filebeat Inputs to different Logstash ports

Hey!

What you are thinking of seems to be valid.
I found a similar post too explaining the reasoning of this approach a little bit: Conditional filebeat output to logstash

C.