# Logstash Multiple input missbehaving

**URL:** https://discuss.elastic.co/t/logstash-multiple-input-missbehaving/304092
**Category:** Logstash
**Created:** [May 6, 2022, 6:16am UTC](https://discuss.elastic.co/t/logstash-multiple-input-missbehaving/304092 "2022-05-06T06:16:13Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![dharminfadia](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dharminfadia/32/119587_2.png) [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)
#### Post date: [May 6, 2022, 6:16am UTC](https://discuss.elastic.co/t/logstash-multiple-input-missbehaving/304092/1 "2022-05-06T06:16:13Z")

</div>

Hello Every One

I m using logstash http input and tcp inout in multiple conf file in single logstash machine  
while I start machin I am getting tcp input DATA in to http input this is ODD how can I fix this please suggest I am sharing both conf file examples

**HTTP INPUT CONF**** Defferenfile in same machien**

input {  
http {  
host =\> "0.0.0.0" # default: 0.0.0.0  
port =\> xyz # default: 8080

}  
}

output {  
Elasticsearch {  
hosts =\> ['[https://es:9200](https://es:9200)' ]  
user =\> 'user'  
password =\> 'pass'  
ssl =\> "true"  
ssl\_certificate\_verification =\> "false"  
index =\> "test-webhook-live"

}  
stdout {  
codec =\> "json"  
}  
}

**TCP INPUT CONF**** Defferenfile in same machien**

input  
{  
tcp  
{  
port =\> abcd  
type =\> "types"  
}  
udp  
{  
port =\> abcd  
type =\> "types"  
}  
}

filter  
{  
if [type] == "deimos"  
{  
grok  
{  
match =\> { "message" =\> [grokpattern"]  
}  
date  
{  
match =\> ["syslog\_timestamp", "MMM d HH:mm:ss", "MMM dd HH:mm:ss"]  
}  
}  
}

output  
{  
if [type] == "type"  
{  
Elasticsearch  
{  
hosts =\> "es:9200"  
user =\> elastic  
password =\> elastic  
ssl =\> true  
ssl\_certificate\_verification =\> false  
index =\> "test-%{+YYYY.ww}"  
}  
}

```
    }
```

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [May 6, 2022, 8:39am UTC](https://discuss.elastic.co/t/logstash-multiple-input-missbehaving/304092/2 "2022-05-06T08:39:01Z")

</div>

Files are not individual pipelines unless specified so [in the configuration](https://www.elastic.co/guide/en/logstash/8.2/multiple-pipelines.html), which means your files will be concatenated into a single pipeline and events from all inputs will go through all filters and go to all outputs.

---

<div class="post-metadata">

### Author: ![dharminfadia](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dharminfadia/32/119587_2.png) [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)
#### Post date: [May 6, 2022, 8:57am UTC](https://discuss.elastic.co/t/logstash-multiple-input-missbehaving/304092/3 "2022-05-06T08:57:33Z")

</div>

Hello @Christian_Dahlqvist

Thank you for Quick Response this is quite logical thing I need to check this thing on production after test I will share you result with you thank a lot for quick response realy apreciate.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 3, 2022, 8:57am UTC](https://discuss.elastic.co/t/logstash-multiple-input-missbehaving/304092/4 "2022-06-03T08:57:52Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
