Multiple Filebeat Prospectors and Filebeat Modules

Hi,

I would like to use Filebeat system and audit modules and send its output directly to Elasticsearch and in the same Filebeat instance I want to pass few other application logs using prospectors and send the output to Logstash. Is that really possible?

Thanks,

No, you cannot have two different outputs. What about running two different instances of filebeat with different configurations?

Thank you for your response. I will try and use second instance of Filebeat.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.