Processing multiple logs from the same machine using ELK
I don’t understand why you need separate configurations for two sources when you can achieve all these in one configuration file.
Taking the scenario when you have two sources In the system to read log from and you set two different sources in one filebeat configuration only.
Output{If source ~=‘/file/path/for/first/log’Elasticsearch {....}else If source ~=‘/file/path/for/second/log’Elasticsearch {....}}