I am running logstash as daemon via systemd
I get my log in to my special log dir /log/logstash/logstash-plain.log
but I also get that in /var/log/message. I want to stop them and I read that it is control by log4j2 file.
but I do not know which lines to comment out. Anyone has done this in past?
I do not want to change service configuration file because it gets overwritten when I do upgrade.