Hi, I am really new to filebeat and wanted know if there is a way we can have multiple dissect tokenizer based on different file inputs in the same configuration?
For my case, I am trying to send logs from nginx as well as from application logs directly to elasticsearch. I felt using dissect instead of logstash for parsing was better.
So I have one app log file which will have a pattern and another log file for nginx in another directory with another pattern. Is it possible to parse both these files and send to elasticsearch?(I might have one or two more log files that would be introduced later on, so want it to be extendable).
I will be using the latest filebeat version. Any help on this is much appreciated.
Thanks!