We have a requirement where we need to publish logs from filebeat to multiple logstash instances. Is there any way we can do this?
You can use Kafka output for this, by sending everything to it and ingesting it into Logstash from many consumer groups
For this scenario we normally recommend running 2 filebeat instances or kafka. This helps decoupling the two downstream systems (if one is down, the other is still operational).
1 Like
Thank you @steffens & @exekias for the updates on this since we wanted some quick solution on this requirement so we ended up running 2 filebeat instances.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.