Logstash Multiple input missbehaving

Hello Every One

I m using logstash http input and tcp inout in multiple conf file in single logstash machine
while I start machin I am getting tcp input DATA in to http input this is ODD how can I fix this please suggest I am sharing both conf file examples

HTTP INPUT CONF Defferenfile in same machien

input {
http {
host => "0.0.0.0" # default: 0.0.0.0
port => xyz # default: 8080

}
}

output {
Elasticsearch {
hosts => [ 'https://es:9200' ]
user => 'user'
password => 'pass'
ssl => "true"
ssl_certificate_verification => "false"
index => "test-webhook-live"

}
stdout {
codec => "json"
}
}

TCP INPUT CONF Defferenfile in same machien

input
{
tcp
{
port => abcd
type => "types"
}
udp
{
port => abcd
type => "types"
}
}

filter
{
if [type] == "deimos"
{
grok
{
match => { "message" => [grokpattern" ]
}
date
{
match => [ "syslog_timestamp", "MMM d HH:mm:ss", "MMM dd HH:mm:ss" ]
}
}
}

output
{
if [type] == "type"
{
Elasticsearch
{
hosts => "es:9200"
user => elastic
password => elastic
ssl => true
ssl_certificate_verification => false
index => "test-%{+YYYY.ww}"
}
}

    }

Files are not individual pipelines unless specified so in the configuration, which means your files will be concatenated into a single pipeline and events from all inputs will go through all filters and go to all outputs.

Hello @Christian_Dahlqvist

Thank you for Quick Response this is quite logical thing I need to check this thing on production after test I will share you result with you thank a lot for quick response realy apreciate.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.