Send logs From Filebeat to 2 different group logstash servers simultaneously

Elastic Stack Beats
1

I need to send logs From Filebeat to 2 different group logstash servers simultaneously

Group A: Single logstash server with certificate_A and CA_A
Group B: 3 logstash servers run in loadbalance mode. with certificate_B and CA_B

May I know is it possible to get the job done by changing the filebeat.yml

2

No, this is not possible, the beats only support one output.

The alternative would be to use a intermediate Logstash that would then be able to send the logs to the two different groups.

3

Hi there,

We use Redis between Filebeat and Logstash. We set tags in our log prospectors and send those to individual Redis lists based on the tag and to multiple Redis instances. We then set-up Logtash to read from the multiple Redis servers.

We have ten Logstash instances and 10 Redis servers. We set-up each Logstash server to read from each Redis server. Therefore if we lose one Logstash instance, the other nine can take the strain. Effectively it is a poor man's clustered Logstash.

I am not sure whether this helps but it may give you another angle to look at.

4

Thanks for the information

5

Thanks!

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.