Logstash mixing up log entries despite multip. pipelines

So I have the following.
2 conf files with different ports, machine A sends to port1 and machine B sends to port2.

I have pipelines.yml:

  • pipeline.id: nginx
    path.config: "/etc/logstash/conf.d/logstash-nginx-es.conf"
  • pipeline.id: gunicorn
    path.config: "/etc/logstash/conf.d/logstash-gunicorn-es.conf"

I have nginx going to prod index and gunicorn to dev.
All nicely split BUT I still get log entries in dev index from machine A which makes no sense, since different port, different config file and different pipeline.

Any ideas? I deleted indexes multiple times now and tried googling but I am lost here.


solved, just saw in the log it didnt read pipelines.yml due to some config line in logstash.yml

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.