# Duplicate log entires
**URL:** https://discuss.elastic.co/t/duplicate-log-entires/39823
**Category:** Logstash
**Created:** [January 21, 2016, 10:07pm UTC](https://discuss.elastic.co/t/duplicate-log-entires/39823 "2016-01-21T22:07:02Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@Diggy](https://discuss.elastic.co/u/Diggy)
#### Post date: [January 21, 2016, 10:07pm UTC](https://discuss.elastic.co/t/duplicate-log-entires/39823/1 "2016-01-21T22:07:02Z")
All,
I'm getting closer to a well-working ELK. However, I'm seeing duplicate log entries for everything (Windows eventlog, Linux syslog) which, of course, isn't good. What's causing this behavior, and how can I fix it? I'll provide whatever config files are appropriate.
Diggy
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [January 22, 2016, 7:03am UTC](https://discuss.elastic.co/t/duplicate-log-entires/39823/2 "2016-01-22T07:03:36Z")
Yes, configuration files would be helpful. Please check exactly which files you have in the configuration file directory (typically /etc/logstash/conf.d). Logstash will read _all_ files it finds. If you list an elasticsearch output in two places you're going to duplicate all messages.
---
### Author:  [@Diggy](https://discuss.elastic.co/u/Diggy)
#### Post date: [January 22, 2016, 2:52pm UTC](https://discuss.elastic.co/t/duplicate-log-entires/39823/3 "2016-01-22T14:52:41Z")
Magnus,
Indeed, it was that output was in two places. Remediating that also forced me to consolidate my configuration files, making everything much cleaner.
Thanks, again, for helping out with my lame newbie question.
Diggy
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 5:14am UTC](https://discuss.elastic.co/t/duplicate-log-entires/39823/4 "2017-07-06T05:14:42Z")