Good afternoon, I understand that in logstash you cannot have more than one file in /etc/logstash/config.d with the same input (filebeat) ...in this case, if you want to have different files that will receive data from filebeat, what would be the best way? Unify all the config files with a script into a single file that would be the one used by logstash so that only the input would appear once? could you somehow use the pipelines.yml file to make it so that there is only one "instance listening" on port 5044? I tried including tags in the input area of each configuration file but I still can't launch logstash with those files.
Thank you !
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.