# Mutiple beats on multiple servers sending logs to logstash through one pipeline

**URL:** <https://discuss.elastic.co/t/mutiple-beats-on-multiple-servers-sending-logs-to-logstash-through-one-pipeline/255205>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [November 12, 2020, 11:42am UTC](https://discuss.elastic.co/t/mutiple-beats-on-multiple-servers-sending-logs-to-logstash-through-one-pipeline/255205 "2020-11-12T11:42:06Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![prajwalgmpp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/prajwalgmpp/32/47707_2.png) [@prajwalgmpp](https://discuss.elastic.co/u/prajwalgmpp)\
**Post date:** [November 12, 2020, 11:42am UTC](https://discuss.elastic.co/t/mutiple-beats-on-multiple-servers-sending-logs-to-logstash-through-one-pipeline/255205/1 "2020-11-12T11:42:06Z")

</div>

Hi. I have a requirement where I am supposed to enable log monitoring of NOI (Netcool Omnibus Impact) components through Elastic stack.

We have decided to install filebeats on all the components and send logs to logstash via a single pipeline.

Can a pipeline have multiple input beats plugin? If so, can it have multiple ports like:

```auto
input {
    beats
             {
              ports => port1, port 2..., port n
}
}
}

```

or should we write multiple pipelines for each beats input?

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [November 12, 2020, 12:18pm UTC](https://discuss.elastic.co/t/mutiple-beats-on-multiple-servers-sending-logs-to-logstash-through-one-pipeline/255205/2 "2020-11-12T12:18:10Z")

</div>

There is no need to have multiple beats input, you can have only one beat input and configure all your filebeats to send to this same input.

But if you want, you can also have multiple beats inputs in one pipeline, but this is will work the same way as if you only have one beats input.

```auto
input {
    beats {
        port => port1
    }
    beats {
        port => port2
    }
    beats {
        port => portN
    }
}

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 10, 2020, 2:18pm UTC](https://discuss.elastic.co/t/mutiple-beats-on-multiple-servers-sending-logs-to-logstash-through-one-pipeline/255205/3 "2020-12-10T14:18:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
