Multiple type output

Elastic Stack Beats
1

Hi All,

Wanted to use elasticsearch and logstash for filebeat output. Though we can use the multiple instances of filebeat would like to check any other possible options.

Requirement

  1. Use elasticsearch output for default filebeat embedded modules like system and apache module
  2. Use logstash output for custom log file parsing and output.

Considering workarounds

  1. create multiple logstash pipelines in which use the pipeline parameter for es output for every ingest pipeline. Many input filters to go on.
  2. Create ingest pipeline for custom logs and publish on ES

if the requirement meet as is two different output would be easy :slight_smile:

2

Beats do not support multiple outputs.

You workarounds are definitely viable solutions. If you try solution 2, you might consider to create filebeat modules.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.