zmoog / public-notes

Apache License 2.0
0 stars 1 forks source link

How to use multiple modules at the same time #6

Closed zmoog closed 1 year ago

zmoog commented 1 year ago

I want to collect activity logs from two event hubs using the same Filebeat. I want to use the Azure module.

Is it possible, and how to achieve it?

zmoog commented 1 year ago

I guess we need to define multiple modules, for example:

# Module: azure
# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-azure.html

- module: azure
  signinlogs:
    enabled: true
    var:
      eventhub: ".."
      consumer_group: ".."
      connection_string: ".."
      storage_account: ".."
      storage_account_key: ".."

- module: azure
  signinlogs:
    enabled: true
    var:
      eventhub: ""
      consumer_group: ""
      connection_string: ""
      storage_account: ""
      storage_account_key: ""

I ran a quick test, and with this configuration, I can spot two azure-eventhub inputs starting in the logs.