Because currently we used v5.5.2, It doesn't support multiple pipline yet.
So we have to implement multiple pipline conf with a few groups of logstash clusters. which each pipline conf with a group of logstash cluster.
We distinguish between different kind of beats through the port instead of field type/flag by far. we use same port for same beat service.
is that clear?
Do you have any good suggestions for that?
Thanks in advance
Thanks