hi all,
is it possible to use 2 different prospectors and 2 different fields? I mean, the first prospector will check the files S:\data\log_temp.dat and add the field type: temporary while the second prospector will check the file S:\data\log.dat and add the field type:consolidated
the aim is to have just one Filebeat instance that will parse two different files that have different purpose.
Yes, if you get it right that will work.
Yes, that's possible! Check the example YAML configuration file below, showing two prospectors with two different paths:
https://www.elastic.co/guide/en/beats/filebeat/6.x/configuration-filebeat-options.html
1 Like
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.