Hello together, i try to send syslog data from rsyslod via json to logstash and this is working nearly as expected. Unfortunately i can see every event twice in elasticsearch. First i double checked if logstash send the event only once with: output { elasticsearch { flush_size => '100' hosts…

Duplicate entries in elasticsearch with fingerprint and uuid

magnusbaeck (Magnus Bäck) June 14, 2018, 2:03pm 2

Why would you have duplicate events in the first place? I suspect you have more than one configuration file containing an elasticsearch output.

Topic		Replies	Views
"uuid" and "fingerprint" fields Logstash	8	2217	July 6, 2017
Duplicate Lines Logstash	1	501	January 6, 2017
Duplicate logs Elasticsearch	14	6870	July 10, 2018
Dupilcate message on elasticsearch Logstash	6	957	December 31, 2017
How can i send duplicate lines (from logstash to elasticsearch) in log file Logstash	6	1140	April 13, 2020

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Duplicate entries in elasticsearch with fingerprint and uuid

Related topics