# Cannot use elasticsearch output module twice

**URL:** <https://discuss.elastic.co/t/cannot-use-elasticsearch-output-module-twice/53112>\
**Category:** Logstash\
**Created:** [June 17, 2016, 8:01am UTC](https://discuss.elastic.co/t/cannot-use-elasticsearch-output-module-twice/53112 "2016-06-17T08:01:41Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![maxlock](https://avatars.discourse-cdn.com/v4/letter/m/439d5e/32.png) [@maxlock](https://discuss.elastic.co/u/maxlock)\
**Post date:** [June 17, 2016, 8:01am UTC](https://discuss.elastic.co/t/cannot-use-elasticsearch-output-module-twice/53112/1 "2016-06-17T08:01:41Z")

</div>

Hi All,

I'm trying to configure Logstash 2.3.2 to call the elasticsearch output module twice as I'm migrating to a new cluster. Calling the module once for either cluster works fine, but if I call it twice no packets are sent to either destination? Any ideas?

-Cheers Max.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [June 17, 2016, 8:32am UTC](https://discuss.elastic.co/t/cannot-use-elasticsearch-output-module-twice/53112/2 "2016-06-17T08:32:01Z")

</div>

What does your configuration look like?

---

<div class="post-metadata">

**Author:** ![maxlock](https://avatars.discourse-cdn.com/v4/letter/m/439d5e/32.png) [@maxlock](https://discuss.elastic.co/u/maxlock)\
**Post date:** [June 17, 2016, 8:56am UTC](https://discuss.elastic.co/t/cannot-use-elasticsearch-output-module-twice/53112/3 "2016-06-17T08:56:35Z")

</div>

Hi Christian, as follows...

```
input {
  syslog {
    port => '6514'
    type => 'syslog'
  }
}
output {
  if [type] == "syslog" {
    elasticsearch {
      hosts => ["127.0.0.1"]
    }
    elasticsearch {
      hosts => ["elasticsearch01","elasticsearch02","elasticsearch03"]
    }
  }
}

```

-Cheers, Max.

---

<div class="post-metadata">

**Author:** ![purbon](https://avatars.discourse-cdn.com/v4/letter/p/edb3f5/32.png) [@purbon](https://discuss.elastic.co/u/purbon)\
**Post date:** [June 22, 2016, 2:48pm UTC](https://discuss.elastic.co/t/cannot-use-elasticsearch-output-module-twice/53112/4 "2016-06-22T14:48:26Z")

</div>

Why do you need two instances, you could have the list of hosts in the same instance and will do the same work.

One situation where you could have multiple outputs of the same class, for example elasticsearch is if they stay in different conditional blocks, for example:

```auto
  if [type] == "foo" {
    elasticsearch {}
  } else {
    elasticsearch {}
  } 

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:51am UTC](https://discuss.elastic.co/t/cannot-use-elasticsearch-output-module-twice/53112/5 "2017-07-06T04:51:07Z")

</div>