Multiple pipelines with file output to same file

Elastic Stack Logstash
1

Currently I have one pipeline and events from filebeat are written to files with the file output filter.

I am transitioning to multiple pipelines but during the transaction some hosts will write to the "default" pipeline and some to the new pipelines.

For various reasons I would like to have the new pipelines and the "default" pipeline write to the same files.

It is safe to have two instance of the file output filter in different pipelines writing to the same file?

2

I do not think so, but you could create a single pipeline writing to the file and send events between pipelines using pipeline to pipeline communication.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.