# Logstash mixing up log entries despite multip. pipelines

**URL:** <https://discuss.elastic.co/t/logstash-mixing-up-log-entries-despite-multip-pipelines/279557>\
**Category:** Logstash\
**Created:** [July 25, 2021, 11:39am UTC](https://discuss.elastic.co/t/logstash-mixing-up-log-entries-despite-multip-pipelines/279557 "2021-07-25T11:39:22Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![pdanjou](https://avatars.discourse-cdn.com/v4/letter/p/e47774/32.png) [@pdanjou](https://discuss.elastic.co/u/pdanjou)\
**Post date:** [July 25, 2021, 11:39am UTC](https://discuss.elastic.co/t/logstash-mixing-up-log-entries-despite-multip-pipelines/279557/1 "2021-07-25T11:39:22Z")

</div>

So I have the following.  
2 conf files with different ports, machine A sends to port1 and machine B sends to port2.

I have pipelines.yml:

- pipeline.id: nginx  
path.config: "/etc/logstash/conf.d/logstash-nginx-es.conf"
- pipeline.id: gunicorn  
path.config: "/etc/logstash/conf.d/logstash-gunicorn-es.conf"

I have nginx going to prod index and gunicorn to dev.  
All nicely split BUT I still get log entries in dev index from machine A which makes no sense, since different port, different config file and different pipeline.

Any ideas? I deleted indexes multiple times now and tried googling but I am lost here.

Thanks

---

<div class="post-metadata">

**Author:** ![pdanjou](https://avatars.discourse-cdn.com/v4/letter/p/e47774/32.png) [@pdanjou](https://discuss.elastic.co/u/pdanjou)\
**Post date:** [July 25, 2021, 12:56pm UTC](https://discuss.elastic.co/t/logstash-mixing-up-log-entries-despite-multip-pipelines/279557/2 "2021-07-25T12:56:39Z")

</div>

solved, just saw in the log it didnt read pipelines.yml due to some config line in logstash.yml

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 22, 2021, 12:56pm UTC](https://discuss.elastic.co/t/logstash-mixing-up-log-entries-despite-multip-pipelines/279557/3 "2021-08-22T12:56:52Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
