The Beats output is a list of target hosts so you can do something like: ['
1.1.1.1:5044', '2.2.2.2:5044']
We have kept the concept of routes for the Beats backend because it helps
the user to not accidently end up in a situation where you have inputs but
no outputs configured. Even when it's not directly reflected in the
configuration file.

Cheers,
Marius


On 8 September 2016 at 02:20, Michael Anthon <[email protected]
> wrote:

> I ran into this issue last night as well.  It seems to me (from looking at
> the beats doco) that beats doesn't handle multiple outputs.  I'm not sure
> how graylog is deciding which output to use but it seems that we can't use
> this type of setup for beats (regardless of the fact that the interface
> allows you to configure it).
>
> Unless I'm missing something completely Beats doesn't seem to have the
> concept of "routes" like nxlog does, there is no way to associate an input
> to an output.
>
> On Tuesday, 6 September 2016 17:57:41 UTC+10, IronCocker wrote:
>>
>> [root@mirror ~]# more /etc/graylog/collector-sidecar
>> /generated/filebeat.yml
>> filebeat:
>>   prospectors:
>>   - document_type: linux
>>     fields:
>>       gl2_source_collector: 0d2e5631-e187-4f09-b1a1-562908f44631
>>     ignore_older: 0
>>     input_type: log
>>     paths:
>>     - /var/log/*
>>     scan_frequency: 10s
>>     tail_files: true
>>   - document_type: nginx
>>     fields:
>>       gl2_source_collector: 0d2e5631-e187-4f09-b1a1-562908f44631
>>     ignore_older: 0
>>     input_type: log
>>     paths:
>>     - /var/log/nginx/*
>>     scan_frequency: 10s
>>     tail_files: true
>> output:
>>   logstash:
>>     hosts:
>>     - 192.168.1.1:5044
>>
>> Hi,
>>     I configured two tags: *linux* and *nginx*, tag *linux* output ['
>> 192.168.1.1:*5044*'], tag *nginx* output ['192.168.1.1:*5055*'], but
>> *filebeat.yml* only have *linux* output, How should i do?
>> thx.
>>
> --
> You received this message because you are subscribed to the Google Groups
> "Graylog Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/graylog2/ed2047db-631b-44aa-ae10-246ba787dfa1%40googlegroups.com
> <https://groups.google.com/d/msgid/graylog2/ed2047db-631b-44aa-ae10-246ba787dfa1%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
> For more options, visit https://groups.google.com/d/optout.
>



-- 
Developer

Tel.: +49 (0)40 609 452 077
Fax.: +49 (0)40 609 452 078

TORCH GmbH - A Graylog Company
Poolstraße 21
20335 Hamburg
Germany

https://www.graylog.com <https://www.torch.sh/>

Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175
Geschäftsführer: Lennart Koopmann (CEO)

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/CAMqbBb%2BJ53B13b3X%2BO_X3Nkyq_3ea%3DXcs%3DChorqu7Lu0RwobYA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to