Multiple Outputs in FileBeat


I have windows server and there are FileBeat and WinLogBeat installed. Both are pointed to Logstash. Everything works as expected. But now iu would like to use IIS module for filebeat. Then my problem is that IIS module shoud be pointed to elastic Search and not to logstash.

How to solve this? What is Best Practice for that?

Thanks Jan

You would start a second Filebeat instance with the IIS module enabled in it and output pointing to Elasticsearch.


This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.