I have 2 configs under /etc/logstash/conf.d/
If I load the configs individually
/usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/config1.conf
and then
/usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/config2.conf
both configs load great.
Also if I leave only 1 config inside conf.d directory and start logstash with
systemctl start logstash
the config loads great.
if I leave both configs and start logstash with "systemctl start logstash" then all the config parsing gets messed up and I end up with extra columns on both indexes.
have you ever seen anything like this? I dont even know how to start researching this problem.