Multiple type output

[Vijayakumar_Kannan (vijay kannan)]

Hi All,

Wanted to use elasticsearch and logstash for filebeat output. Though we can use the multiple instances of filebeat would like to check any other possible options.

Requirement

1. Use elasticsearch output for default filebeat embedded modules like system and apache module
2. Use logstash output for custom log file parsing and output.

Considering workarounds

1. create multiple logstash pipelines in which use the pipeline parameter for es output for every ingest pipeline. Many input filters to go on.
2. Create ingest pipeline for custom logs and publish on ES

if the requirement meet as is two different output would be easy

[steffens (Steffen Siering)]

Beats do not support multiple outputs.

You workarounds are definitely viable solutions. If you try solution 2, you might consider to create filebeat modules.