Wanted to use elasticsearch and logstash for filebeat output. Though we can use the multiple instances of filebeat would like to check any other possible options.
- Use elasticsearch output for default filebeat embedded modules like system and apache module
- Use logstash output for custom log file parsing and output.
- create multiple logstash pipelines in which use the pipeline parameter for es output for every ingest pipeline. Many input filters to go on.
- Create ingest pipeline for custom logs and publish on ES
if the requirement meet as is two different output would be easy