# Multiple output in Filebeat

**URL:** <https://discuss.elastic.co/t/multiple-output-in-filebeat/283001>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [September 1, 2021, 7:20am UTC](https://discuss.elastic.co/t/multiple-output-in-filebeat/283001 "2021-09-01T07:20:44Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![alon\_carmelly](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alon_carmelly/32/118670_2.png) [@alon\_carmelly](https://discuss.elastic.co/u/alon_carmelly)\
**Post date:** [September 1, 2021, 7:20am UTC](https://discuss.elastic.co/t/multiple-output-in-filebeat/283001/1 "2021-09-01T07:20:44Z")

</div>

I am trying to setup multiple index outputs from the same filebeat.yml.  
I have different paths on the same server and I need each path to go to the same logstash but have a different index name.

Is it possible?

---

<div class="post-metadata">

**Author:** ![kvch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kvch/32/72058_2.png) [@kvch](https://discuss.elastic.co/u/kvch)\
**Post date:** [September 1, 2021, 10:21am UTC](https://discuss.elastic.co/t/multiple-output-in-filebeat/283001/2 "2021-09-01T10:21:31Z")

</div>

You can select different indices based on the contents of the event, etc: [Configure the Elasticsearch output | Filebeat Reference [7.14] | Elastic](https://www.elastic.co/guide/en/beats/filebeat/current/elasticsearch-output.html#indices-option-es)

But keep in mind that the indices have to be on the same ES. ATM, Beats cannot connect to multiple outputs.

---

<div class="post-metadata">

**Author:** ![alon\_carmelly](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alon_carmelly/32/118670_2.png) [@alon\_carmelly](https://discuss.elastic.co/u/alon_carmelly)\
**Post date:** [September 1, 2021, 12:31pm UTC](https://discuss.elastic.co/t/multiple-output-in-filebeat/283001/3 "2021-09-01T12:31:59Z")

</div>

I saw there is a thing called filebeat-god to run multiple instances.  
could this be a solution for me?

---

<div class="post-metadata">

**Author:** ![Marius\_Iversen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_iversen/32/68988_2.png) [@Marius\_Iversen](https://discuss.elastic.co/u/Marius_Iversen)\
**Post date:** [September 1, 2021, 4:39pm UTC](https://discuss.elastic.co/t/multiple-output-in-filebeat/283001/4 "2021-09-01T16:39:23Z")

</div>

It is also possible to run multiple instances of just filebeat without any third party wrapper around it, there is nothing stopping it from running more than one filebeat at the same time 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 29, 2021, 6:40pm UTC](https://discuss.elastic.co/t/multiple-output-in-filebeat/283001/5 "2021-09-29T18:40:12Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.