I created a cluster with two nodes on two servers. Each has kibana, elasticsearch, logstash and filebeat installed. The log files are being copied with a cronjob (Admin reasons) from the the servers i want to log to both servers. In this scenario only one filebeat is active and harvests data and sends it to both logstash. What i want is that if one of the nodes crashes the other filebeat should start automaticly or manually to harvest the data from the point the other filebeat stoped without creating doubles. Is there a possibility to sync the two filebeats.
I don't believe so but I moved your question to #beats:filebeat
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.