How to manage input from multiple beats to centralized Logstash How to manage input from multiple beats to centralized Logstash elasticsearch elasticsearch

How to manage input from multiple beats to centralized Logstash


Actually the host parameter for beats input plugin means The IP address to listen on. This is not the ip for filebat and actually not required at all.

So just specifying port to listen must be enough and I think the configuration you show will work. Logstash will listen logs from all 10 machines and will process them.

https://www.elastic.co/guide/en/logstash/current/plugins-inputs-beats.html#plugins-inputs-beats-host