# Logstash Centralized management pipeline **URL:** \ **Category:** Logstash\ **Created:** [January 20, 2021, 6:42pm UTC](https://discuss.elastic.co/t/logstash-centralized-management-pipeline/261691 "2021-01-20T18:42:21Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![esijati](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/esijati/32/122104_2.png) [@esijati](https://discuss.elastic.co/u/esijati)\ **Post date:** [January 20, 2021, 6:42pm UTC](https://discuss.elastic.co/t/logstash-centralized-management-pipeline/261691/1 "2021-01-20T18:42:22Z")
Hi, I am trying to enable the logstash centralized pipeline management with X-Pack security enabled, but with limited documentation from ELK I am unable to proceed further on how it will look at Kibana side. Regards JS ---
**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Post date:** [January 20, 2021, 8:38pm UTC](https://discuss.elastic.co/t/logstash-centralized-management-pipeline/261691/2 "2021-01-20T20:38:56Z")
Did you follow the instructions in the [documentation](https://www.elastic.co/guide/en/logstash/current/logstash-centralized-pipeline-management.html)? What is not working? Also, what is your license? You need at least the paid Gold license. ---
**Author:** ![esijati](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/esijati/32/122104_2.png) [@esijati](https://discuss.elastic.co/u/esijati)\ **Post date:** [January 20, 2021, 9:29pm UTC](https://discuss.elastic.co/t/logstash-centralized-management-pipeline/261691/3 "2021-01-20T21:29:00Z")
Hi, I am using Enterprise License. I followed this documentation and running the logstash as below. 1. logstash.yml : x-pack enabled with SSL and 2. abc.conf: with beat inputs and Elasticsearch as output. 3. added the abc.conf entry in pipelines.yml 4. running the logstash as "logstash -f abc.conf 5. created the pipeline (abc.conf) in "Centralized Logstash Management" section of Stack Management in Kibana. 6. Made the changes in abc.conf, re-running the pipeline, expecting the changes to reflect in "Centralized Logstash Management" ---
**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Post date:** [January 20, 2021, 10:02pm UTC](https://discuss.elastic.co/t/logstash-centralized-management-pipeline/261691/4 "2021-01-20T22:02:22Z")
This is not what the documentation is saying. When using the Centralized Logstash Management you do not use the `pipelines.yml` anymore, nor you start logstash using the `-f` parameter, you start logstash and all the pipelines will be synced from your elasticsearch. I would recommend that you follow these steps on how to configure the [Centralized Management Pipeline](https://www.elastic.co/guide/en/logstash/current/configuring-centralized-pipelines.html#configuration-management-settings) in logstash. ---
**Author:** ![esijati](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/esijati/32/122104_2.png) [@esijati](https://discuss.elastic.co/u/esijati)\ **Post date:** [January 20, 2021, 10:08pm UTC](https://discuss.elastic.co/t/logstash-centralized-management-pipeline/261691/5 "2021-01-20T22:08:59Z")
Ok, So I need to create the separate .conf for each logstash and then list in the "xpack.management.pipeline.id". I think I am all done with the configuration. Would be great if you can share the recommended way to run the logstash . Thankyou ---
**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Post date:** [January 20, 2021, 10:17pm UTC](https://discuss.elastic.co/t/logstash-centralized-management-pipeline/261691/6 "2021-01-20T22:17:27Z")
You do not create configuration files anymore, you will create them through the Kibana interface according to these [steps](https://www.elastic.co/guide/en/logstash/current/logstash-centralized-pipeline-management.html#_manage_pipelines) If you want a pipeline named `abc`, you will need this line in the `logstash.yml` file in each one of the logstash instances that you want to run this pipeline: ```auto xpack.management.pipeline.id: ["abc"] ``` Then you will create in Kibana a pipeline with the ID `abc`, when your logstash instance starts, it will sync the pipeline configuration. I don't know what system you are using, but I would recommend that you run logstash as a service, if you are on linux you can use systemd and follow this [documentation](https://www.elastic.co/guide/en/logstash/current/running-logstash.html#running-logstash), if you are on windows you can use nssm and follow this [documentation](https://www.elastic.co/guide/en/logstash/current/running-logstash-windows.html#running-logstash-windows-nssm) ---
**Author:** ![esijati](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/esijati/32/122104_2.png) [@esijati](https://discuss.elastic.co/u/esijati)\ **Post date:** [January 20, 2021, 10:26pm UTC](https://discuss.elastic.co/t/logstash-centralized-management-pipeline/261691/7 "2021-01-20T22:26:35Z")
Thanks Leandro much appreciated ! 🙂 ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [January 21, 2021, 12:09am UTC](https://discuss.elastic.co/t/logstash-centralized-management-pipeline/261691/8 "2021-01-21T00:09:03Z")
Welcome to our community! 😃 > [@esijati](#): > > I am using Enterprise License. Please do speak to your Support engineer then, they will be able to help 🙂 ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [February 18, 2021, 12:09am UTC](https://discuss.elastic.co/t/logstash-centralized-management-pipeline/261691/9 "2021-02-18T00:09:18Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.