# 2 Inputs and 1 Output. Can we pass events from 1 input to other input
**URL:** https://discuss.elastic.co/t/2-inputs-and-1-output-can-we-pass-events-from-1-input-to-other-input/97883
**Category:** Logstash
**Created:** [August 22, 2017, 9:28am UTC](https://discuss.elastic.co/t/2-inputs-and-1-output-can-we-pass-events-from-1-input-to-other-input/97883 "2017-08-22T09:28:29Z")
**Posts on this page:** 9
**Page:** 1
### Author:  [@rkhapre](https://discuss.elastic.co/u/rkhapre)
#### Post date: [August 22, 2017, 9:28am UTC](https://discuss.elastic.co/t/2-inputs-and-1-output-can-we-pass-events-from-1-input-to-other-input/97883/1 "2017-08-22T09:28:29Z")
Hi All
i Have created 2 conf files
Conf1 : No problem in this conf file
```
{ input
file....
}
{
output
elasticsearch
{
index => "test1"
}
}
```
In the Second Conf file conf2:
I have 2 inputs and 1 output
```
{ input
elasticsearch {
index => "test1"
}
http_poller
{
Here i am passing the value from the output of config file1 which is basically the input now : conf1 as %{ variable}
}
}
{
output
elasticsearch {
index => "test2"
}
{
```
I am not able to pass the value by reading the value from index test1 to the input of http\_poller.
Please let me know if this is possible?
---
### Author:  [@rkhapre](https://discuss.elastic.co/u/rkhapre)
#### Post date: [August 22, 2017, 3:44pm UTC](https://discuss.elastic.co/t/2-inputs-and-1-output-can-we-pass-events-from-1-input-to-other-input/97883/2 "2017-08-22T15:44:54Z")
Did any one tried such scenarios?
---
### Author:  [@theuntergeek](https://discuss.elastic.co/u/theuntergeek)
#### Post date: [August 22, 2017, 4:03pm UTC](https://discuss.elastic.co/t/2-inputs-and-1-output-can-we-pass-events-from-1-input-to-other-input/97883/3 "2017-08-22T16:03:54Z")
I can't quite follow what you're trying to do here. Could you please re-explain it?
---
### Author:  [@rkhapre](https://discuss.elastic.co/u/rkhapre)
#### Post date: [August 22, 2017, 6:25pm UTC](https://discuss.elastic.co/t/2-inputs-and-1-output-can-we-pass-events-from-1-input-to-other-input/97883/4 "2017-08-22T18:25:32Z")
Hi
I have 2 sources
Source# 1 : Contains list of Incident#. This source contains on the incident numbers
Source#2 : Contains details on those Incident# like who created, when created, severity etc.This can be achieved on by passing the incident number
I have created a conf file : conf1
```
{ input
file....
}
{
output
elasticsearch
{
index => "test1"
}
}
```
With this conf file i am getting list of all the incidents.
Since now i want the details on those incidents, i want to pass this incident numbers one by one to other conf file
So here i am keeping 2 input.
Input 1 which is already streamed from Source 1 and having incident#
The value from input1( test1 index) as "incident number" will be passed to second input block on http\_poller to get the details on incident in test 2 index
```
{ input
elasticsearch {
index => "test1"
}
http_poller
{
Here i am passing the value from the output of config file1 which is basically the input now : conf1 as %{ variable}
}
}
{
output
elasticsearch {
index => "test2"
}
{
```
This is bit complex, but its not working for me.
In log file, i am getting clear text as %{incidentnumber}
Instead i am expecting value from test1 index
---
### Author:  [@theuntergeek](https://discuss.elastic.co/u/theuntergeek)
#### Post date: [August 23, 2017, 2:35am UTC](https://discuss.elastic.co/t/2-inputs-and-1-output-can-we-pass-events-from-1-input-to-other-input/97883/5 "2017-08-23T02:35:06Z")
Are these pipelines in different Logstash instances? They would need to be, if you're planning on having pipeline2 ingest the results of pipeline1. You cannot currently have one pipeline feed to another within the same Logstash instance.
---
### Author:  [@rkhapre](https://discuss.elastic.co/u/rkhapre)
#### Post date: [August 23, 2017, 3:32am UTC](https://discuss.elastic.co/t/2-inputs-and-1-output-can-we-pass-events-from-1-input-to-other-input/97883/6 "2017-08-23T03:32:38Z")
Assume that you have 100 incident in conf1/test1 index. we can stop running this pipeline once it is loaded
In conf2. I am using API with http\_poller input plugin to get details on each incident by passing incident number from test1 index one by one.
So not necessarily to run both together
---
### Author:  [@theuntergeek](https://discuss.elastic.co/u/theuntergeek)
#### Post date: [August 23, 2017, 1:06pm UTC](https://discuss.elastic.co/t/2-inputs-and-1-output-can-we-pass-events-from-1-input-to-other-input/97883/7 "2017-08-23T13:06:36Z")
That's really just 2 logstash instances with some sort of broker in between, then.
`SOURCE1 <- LS1 -> OUTPUT1 <- LS2 -> OUTPUT2`
It seems that your "broker" here is Elasticsearch.
Why are you using the http\_poller to read from Elasticsearch instead of the elasticsearch input plugin?
---
### Author:  [@rkhapre](https://discuss.elastic.co/u/rkhapre)
#### Post date: [August 23, 2017, 1:41pm UTC](https://discuss.elastic.co/t/2-inputs-and-1-output-can-we-pass-events-from-1-input-to-other-input/97883/8 "2017-08-23T13:41:56Z")
I have `file` input as Source1 which just lists the number of incidents.
After posting this to ES ( test 1index)
I have an API which just gives the details of incident based on incident number. That is the reason i use
http\_poller to run the API which gives the incident details.THis API works on the parameter of incident number. Now which is available in index: test 1.
I use http\_poller to read from application as SOAP API to get detailed incident details
I hope now it is clear
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 20, 2017, 1:42pm UTC](https://discuss.elastic.co/t/2-inputs-and-1-output-can-we-pass-events-from-1-input-to-other-input/97883/9 "2017-09-20T13:42:05Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.