on the FILEBEAT side setup filebeat.yml to have references on my all log files (using filebeat.config.inputs attribute) and tags related wit every input file
    on the LOGSTASH side setup one configuration file, now listening on on unique port and then
    inside one big configuration file use "if, elseif" based on the tags, so every time we have the execution of adequate part of pipline configuration (based on its tag)

資料來源

另外，點這裡是我這次鐵人賽唯一的一篇文章，喜歡的話左上角點 Like

不能，beats 的 output 只能做 load balance，請在 input 開多個 type 為 log 的陣列並在同個欄位設定不同的植仰賴 logstash 做 if/else 處理，以下為範例 filebeat 設定檔的範例

filebeat.inputs:
- type: log
  paths:
    - /var/log/a.log
  fields:
    which_from: a.log
  fields_under_root: true
- type: log
  paths:
    - /var/log/b.log
  fields:
    which_from: b.log
  fields_under_root: true