I am trying to setup multiple index outputs from the same filebeat.yml.
I have different paths on the same server and I need each path to go to the same logstash but have a different index name.
Is it possible?
I am trying to setup multiple index outputs from the same filebeat.yml.
I have different paths on the same server and I need each path to go to the same logstash but have a different index name.
Is it possible?
You can select different indices based on the contents of the event, etc: Configure the Elasticsearch output | Filebeat Reference [7.14] | Elastic
But keep in mind that the indices have to be on the same ES. ATM, Beats cannot connect to multiple outputs.
I saw there is a thing called filebeat-god to run multiple instances.
could this be a solution for me?
It is also possible to run multiple instances of just filebeat without any third party wrapper around it, there is nothing stopping it from running more than one filebeat at the same time
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.