Multiple Filebeat output

Elastic Stack Beats
1

Hi All,

is there a way to send logs from filebeat to 2 different outputs.
Currently, we have Kafka in our ELK cluster. for logs like syslog, auditlog on the server, we want to push it to Kafka and application logs we want to push it directly to Elastic cluster. Not sure how it can be achieved. Any leads are appreciated!!

2

Unfortunately you can't have multiple output types in a Beat. The only workarounds I know is to install multiple beat services each with their own configuration.