Does running multiple logstash instance is a good idea?

Hi, Currently I'm running multiple instance of filebeat in my production environment, each filebeat module have it's own instance, so when I need to change the configuration on specific module, I'll not bother other module/config.

Since logstash will run and read all the .conf file /etc/logstash/conf.d/, I wonder if it is a good idea to run multiple instance of logstash for each parser file I have? The idea is to make sure I don't disturb other logstash parser when I need to change specific parser and restart the logstash

Thank you

Why not look at using pipelines instead?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.