Uncategorised

Elasticsearch – Beats – Logstash FAQs And Answers

September 24, 2021 comments off

Elasticsearch

How to get previous version of docuents?

No, you can’t do this using the built-in versioning. All that does is to store the current version number to prevent you applying updates out of order.

If you wanted to keep multiple versions available, then you’d have to implement that yourself. Depending on how many versions you are likely to want to store.

Beats

How to Configure filebeat to multiple output?

Unfortunately, running multiple outputs in Filebeat is not supported.

However, you could run multiple instances of Filebeat reading the same files. For example one Filebeat instance could be reading the files and dropping every non INFO level log lines. Then it would forward the collected events to Elasticsearch. The other instance could only read ERROR level lines and forward it to Kafka.

Rajesh Kumar
Follow me
Latest posts by Rajesh Kumar (see all)