不好意思,老师我又来了。6.0版本的beats移除了多output如何解决,官方的issue:https://github.com/elastic/beats/issues/5317
是的,文中也给出解决办法了
If you require multiple outputs, you have the following options:
use the Logstash output and then use Logstash to pipe the events to multiple outputs
run multiple instances of the same Beat
If you used the file or console outputs for debugging purposes, in addition to the main output, we recommend using the -d "publish" option which logs the published events in the Filebeat logs.
..多运行一个packetbeat