Multiple output in Filebeat

I am trying to setup multiple index outputs from the same filebeat.yml.
I have different paths on the same server and I need each path to go to the same logstash but have a different index name.

Is it possible?

You can select different indices based on the contents of the event, etc: Configure the Elasticsearch output | Filebeat Reference [7.14] | Elastic

But keep in mind that the indices have to be on the same ES. ATM, Beats cannot connect to multiple outputs.

I saw there is a thing called filebeat-god to run multiple instances.
could this be a solution for me?

It is also possible to run multiple instances of just filebeat without any third party wrapper around it, there is nothing stopping it from running more than one filebeat at the same time :slight_smile:

1 Like