Logstash is merging messages sent through http

Hi, I have a basic Logstash config with HTTP as input.
My API is writing logs every 2-3 seconds, and sometimes on Kibana I can see two messages, with their two timestamps and two different IPs (from the caller), etc in the same entry.

Any idea why is this happening and how can I solve it?
(I'm using two pipelines, Idk if that's relevant. Not sure what other information I could provide)

input {
  http {
    type => "myapi"
    host => "localhost"
    port => 5090
    codec => json
output {
  elasticsearch {
    hosts => ["servername:9200"]
    index => "%{type}-%{+YYYY.MM}"
    user => "elastic"
    password => "elastic"


This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.