The Beats output is a list of target hosts so you can do something like: ['
1.1.1.1:5044', '2.2.2.2:5044']
We have kept the concept of routes for the Beats backend because it helps
the user to not accidently end up in a situation where you have inputs but
no outputs configured. Even when it's not directly reflected in the
configuration file.

Cheers,
Marius


On 8 September 2016 at 02:20, Michael Anthon <michael.ant...@infoview.com.au
> wrote:

> I ran into this issue last night as well.  It seems to me (from looking at
> the beats doco) that beats doesn't handle multiple outputs.  I'm not sure
> how graylog is deciding which output to use but it seems that we can't use
> this type of setup for beats (regardless of the fact that the interface
> allows you to configure it).
>
> Unless I'm missing something completely Beats doesn't seem to have the
> concept of "routes" like nxlog does, there is no way to associate an input
> to an output.
>
> On Tuesday, 6 September 2016 17:57:41 UTC+10, IronCocker wrote:
>>
>> [root@mirror ~]# more /etc/graylog/collector-sidecar
>> /generated/filebeat.yml
>> filebeat:
>>   prospectors:
>>   - document_type: linux
>>     fields:
>>       gl2_source_collector: 0d2e5631-e187-4f09-b1a1-562908f44631
>>     ignore_older: 0
>>     input_type: log
>>     paths:
>>     - /var/log/*
>>     scan_frequency: 10s
>>     tail_files: true
>>   - document_type: nginx
>>     fields:
>>       gl2_source_collector: 0d2e5631-e187-4f09-b1a1-562908f44631
>>     ignore_older: 0
>>     input_type: log
>>     paths:
>>     - /var/log/nginx/*
>>     scan_frequency: 10s
>>     tail_files: true
>> output:
>>   logstash:
>>     hosts:
>>     - 192.168.1.1:5044
>>
>> Hi,
>>     I configured two tags: *linux* and *nginx*, tag *linux* output ['
>> 192.168.1.1:*5044*'], tag *nginx* output ['192.168.1.1:*5055*'], but
>> *filebeat.yml* only have *linux* output, How should i do?
>> thx.
>>
> --
> You received this message because you are subscribed to the Google Groups
> "Graylog Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to graylog2+unsubscr...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/graylog2/ed2047db-631b-44aa-ae10-246ba787dfa1%40googlegroups.com
> <https://groups.google.com/d/msgid/graylog2/ed2047db-631b-44aa-ae10-246ba787dfa1%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
> For more options, visit https://groups.google.com/d/optout.
>



-- 
Developer

Tel.: +49 (0)40 609 452 077
Fax.: +49 (0)40 609 452 078

TORCH GmbH - A Graylog Company
Poolstraße 21
20335 Hamburg
Germany

https://www.graylog.com <https://www.torch.sh/>

Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175
Geschäftsführer: Lennart Koopmann (CEO)

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/CAMqbBb%2BJ53B13b3X%2BO_X3Nkyq_3ea%3DXcs%3DChorqu7Lu0RwobYA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to