Two filbert.yml file


(Felipe Concha) #1

Hello all,
a question:
can I create two files filebeat.yml on the same machine (both are here: /etc/filebeat/) and each one sent the same information but to different logstash?
(not as loadbalancer)

regards
Felipe


(Jaime Soriano) #2

Hi @fconcha,

You can have run filebeat instances on the same host, but they need to use a different data path. If you want them to share the same configuration, you can override the data path with the --path.data <path> flag. And if you need to override additional settings like the logstash host, you can do it for example with -E output.logstash.hosts=['<host>:<port>'].

Out of curiosity, why do you need this architecture?


(Felipe Concha) #3

Thanks for your answer, could you be a little more specific.

I need it because I want to send information to a central ELK server and also send the same information to another local server to which other people will have access.

Regards,
Felipe


(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.