# How do I stop a Logtsash pipeline from also printing every document to STDOUT

**URL:** <https://discuss.elastic.co/t/how-do-i-stop-a-logtsash-pipeline-from-also-printing-every-document-to-stdout/246258>\
**Category:** Logstash\
**Tags:** docker\
**Created:** [August 25, 2020, 9:40am UTC](https://discuss.elastic.co/t/how-do-i-stop-a-logtsash-pipeline-from-also-printing-every-document-to-stdout/246258 "2020-08-25T09:40:02Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![c1jt](https://avatars.discourse-cdn.com/v4/letter/c/49beb7/32.png) [@c1jt](https://discuss.elastic.co/u/c1jt)\
**Post date:** [August 25, 2020, 9:40am UTC](https://discuss.elastic.co/t/how-do-i-stop-a-logtsash-pipeline-from-also-printing-every-document-to-stdout/246258/1 "2020-08-25T09:40:02Z")

</div>

Ayup,

I have a Docker setup (E, L & K w/ compose) which has its Logstash parsing custom logs. The "Sophos" pipeline only outputs to an elastic node.

However; Logstash It thinks its super funny to _also_ print every single message to STDOUT despite there being no output for that.

It didn't originally do this, something changed in the pipeline during development. I think it might have started when I added RUBY maths in part of the pipeline, but I can't remove any of that as its in production now.

```
output {
  elasticsearch {
    hosts => "https://<elastic_host>:9200"
    cacert => "<path>/ca.crt"
    user => "logstash_writer"
    password => "<pword>"
    index => "sophos_xg-7.8.1-%{+MM.YYYY}"
    ssl_certificate_verification => true
  }
}

```

RUBY example (they're all like this):

```
ruby {
        id => "calculate total_cpu"
        code => "event.set('total_cpu', (100 - event.get('idle').to_f).round(2))"
      }

```

So far I've tried:

- Using compose's `--log-level CRITICAL`
- Explicitly disabling Logstash debug modes
- Swearing

Without using physical violence; how do I stop this occuring? It's taking up cycles to do this and making Logstash debuging hard af

Thanks!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 22, 2020, 9:40am UTC](https://discuss.elastic.co/t/how-do-i-stop-a-logtsash-pipeline-from-also-printing-every-document-to-stdout/246258/2 "2020-09-22T09:40:24Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
