Logstash mixing up log entries despite multip. pipelines

Elastic Stack Logstash
1

So I have the following.
2 conf files with different ports, machine A sends to port1 and machine B sends to port2.

I have pipelines.yml:

  • pipeline.id: nginx
    path.config: "/etc/logstash/conf.d/logstash-nginx-es.conf"
  • pipeline.id: gunicorn
    path.config: "/etc/logstash/conf.d/logstash-gunicorn-es.conf"

I have nginx going to prod index and gunicorn to dev.
All nicely split BUT I still get log entries in dev index from machine A which makes no sense, since different port, different config file and different pipeline.

Any ideas? I deleted indexes multiple times now and tried googling but I am lost here.

Thanks

2

solved, just saw in the log it didnt read pipelines.yml due to some config line in logstash.yml

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.