ES 6.5.3 : having two separate logstash configuration files (and separate indexes) is causing fields from one index to bleed into the other

See this post.