# Multiple Outputs in FileBeat

**URL:** <https://discuss.elastic.co/t/multiple-outputs-in-filebeat/177595>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [April 19, 2019, 10:02am UTC](https://discuss.elastic.co/t/multiple-outputs-in-filebeat/177595 "2019-04-19T10:02:00Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jan\_Kaspar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jan_kaspar/32/44443_2.png) [@Jan\_Kaspar](https://discuss.elastic.co/u/Jan_Kaspar)\
**Post date:** [April 19, 2019, 10:02am UTC](https://discuss.elastic.co/t/multiple-outputs-in-filebeat/177595/1 "2019-04-19T10:02:00Z")

</div>

Hello,

I have windows server and there are FileBeat and WinLogBeat installed. Both are pointed to Logstash. Everything works as expected. But now iu would like to use IIS module for filebeat. Then my problem is that IIS module shoud be pointed to elastic Search and not to logstash.

How to solve this? What is Best Practice for that?

Thanks Jan

---

<div class="post-metadata">

**Author:** ![shaunak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaunak/32/6643_2.png) [@shaunak](https://discuss.elastic.co/u/shaunak)\
**Post date:** [April 19, 2019, 2:26pm UTC](https://discuss.elastic.co/t/multiple-outputs-in-filebeat/177595/2 "2019-04-19T14:26:09Z")

</div>

You would start a second Filebeat instance with the IIS module enabled in it and output pointing to Elasticsearch.

Shaunak

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 17, 2019, 2:26pm UTC](https://discuss.elastic.co/t/multiple-outputs-in-filebeat/177595/3 "2019-05-17T14:26:15Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.