Morning all
I've been asked setup the elastic stack for the systems we ship. Though for now it's possibly outside the scope of what I've been asked to do, is it possible to take info from metricbeat and effectively T it to two different places?
One one site and takes everything, the other off site which has much of the identifiable infomation filtered out.
Thanks
Alistair
You can use a clone filter to splice the input stream in two. The first half goes to one output and the other half gets filtered and is sent to another output.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.