Multiple prospectors with multiple add_fields


(Roger) #1

hi all,
is it possible to use 2 different prospectors and 2 different fields? I mean, the first prospector will check the files S:\data\log_temp.dat and add the field type: temporary while the second prospector will check the file S:\data\log.dat and add the field type:consolidated


(Roger) #3

the aim is to have just one Filebeat instance that will parse two different files that have different purpose.


(Tim Ward) #4

Yes, if you get it right that will work.


(Matt P) #5

Yes, that's possible! Check the example YAML configuration file below, showing two prospectors with two different paths:

https://www.elastic.co/guide/en/beats/filebeat/6.x/configuration-filebeat-options.html


(system) #6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.