Multiple Filebeat Prospectors and Filebeat Modules

Elastic Stack Beats
1

Hi,

I would like to use Filebeat system and audit modules and send its output directly to Elasticsearch and in the same Filebeat instance I want to pass few other application logs using prospectors and send the output to Logstash. Is that really possible?

Thanks,

2

No, you cannot have two different outputs. What about running two different instances of filebeat with different configurations?

3

Thank you for your response. I will try and use second instance of Filebeat.