# Multiple instance of Filebeat

**URL:** <https://discuss.elastic.co/t/multiple-instance-of-filebeat/247164>\
**Category:** Beats\
**Tags:** filebeat, metricbeat\
**Created:** [September 2, 2020, 4:49am UTC](https://discuss.elastic.co/t/multiple-instance-of-filebeat/247164 "2020-09-02T04:49:39Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![Priya\_Kapoor](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/priya_kapoor/32/74811_2.png) [@Priya\_Kapoor](https://discuss.elastic.co/u/Priya_Kapoor)\
**Post date:** [September 2, 2020, 4:49am UTC](https://discuss.elastic.co/t/multiple-instance-of-filebeat/247164/1 "2020-09-02T04:49:40Z")

</div>

How I can create multiple instance for filebeat 7.4.2. I am new to ELK kindly help.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 2, 2020, 4:51am UTC](https://discuss.elastic.co/t/multiple-instance-of-filebeat/247164/2 "2020-09-02T04:51:00Z")

</div>

What problem are you trying to resolve by doing this?

---

<div class="post-metadata">

**Author:** ![Priya\_Kapoor](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/priya_kapoor/32/74811_2.png) [@Priya\_Kapoor](https://discuss.elastic.co/u/Priya_Kapoor)\
**Post date:** [September 2, 2020, 5:04am UTC](https://discuss.elastic.co/t/multiple-instance-of-filebeat/247164/3 "2020-09-02T05:04:34Z")

</div>

I want to fetch 2 separate logs through filebeat. So for apache logs I already enabled the filebeat module but for node logs I want to use the multiple filebeat instance as my elk setup is on another server. How do I setup the multiple filebeat for that. I want both the logs apache and node from same server.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 2, 2020, 5:05am UTC](https://discuss.elastic.co/t/multiple-instance-of-filebeat/247164/4 "2020-09-02T05:05:34Z")

</div>

You can collect both of those with a single instance.

---

<div class="post-metadata">

**Author:** ![Priya\_Kapoor](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/priya_kapoor/32/74811_2.png) [@Priya\_Kapoor](https://discuss.elastic.co/u/Priya_Kapoor)\
**Post date:** [September 2, 2020, 5:06am UTC](https://discuss.elastic.co/t/multiple-instance-of-filebeat/247164/5 "2020-09-02T05:06:08Z")

</div>

Can you kindly provide any link or example for that?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 2, 2020, 5:10am UTC](https://discuss.elastic.co/t/multiple-instance-of-filebeat/247164/6 "2020-09-02T05:10:58Z")

</div>

If you've enabled the module, then you need to also configure a file input - [https://www.elastic.co/guide/en/beats/filebeat/7.9/filebeat-input-log.html](https://www.elastic.co/guide/en/beats/filebeat/7.9/filebeat-input-log.html)

---

<div class="post-metadata">

**Author:** ![Priya\_Kapoor](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/priya_kapoor/32/74811_2.png) [@Priya\_Kapoor](https://discuss.elastic.co/u/Priya_Kapoor)\
**Post date:** [September 2, 2020, 5:28am UTC](https://discuss.elastic.co/t/multiple-instance-of-filebeat/247164/7 "2020-09-02T05:28:16Z")

</div>

But I want data through logstash which is on another server. If I give input in filebeat then I have to give output through logstash for node logs and if I did that configuration then for apache logs I will not be able to enable the output through elasticsearch.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 2, 2020, 5:29am UTC](https://discuss.elastic.co/t/multiple-instance-of-filebeat/247164/8 "2020-09-02T05:29:12Z")

</div>

It might be worth following up on this thread - [How I can fetch the apache and node logs through filebeat](https://discuss.elastic.co/t/how-i-can-fetch-the-apache-and-node-logs-through-filebeat/246926) - rather than starting a new one with a different approach? 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 30, 2020, 7:29am UTC](https://discuss.elastic.co/t/multiple-instance-of-filebeat/247164/9 "2020-09-30T07:29:15Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
