Hello all,
a question:
can I create two files filebeat.yml on the same machine (both are here: /etc/filebeat/) and each one sent the same information but to different logstash?
(not as loadbalancer)
regards
Felipe
Hi @fconcha,
You can have run filebeat instances on the same host, but they need to use a different data path. If you want them to share the same configuration, you can override the data path with the --path.data <path> flag. And if you need to override additional settings like the logstash host, you can do it for example with -E output.logstash.hosts=['<host>:<port>'].
Out of curiosity, why do you need this architecture?
Thanks for your answer, could you be a little more specific.
I need it because I want to send information to a central ELK server and also send the same information to another local server to which other people will have access.
Regards,
Felipe