Logstash multiple pipelines issue

Elastic Stack Logstash
1

Hi guys,
I have a strange issue with Logstash 5.6.9 and multiple pipelines

I have two pipelines that send messages to two different elastic servers, with different IP and subnet

Yesterday one of this server gone offline, but logstash did not send events also to second elastic server

I don't understand, are pipelines separated in output?

Thanks in advance,
Jack

2

Please provide details about your configuration. What does pipelines.yml look like, what's in the configuration files, etc?

3

Hi @magnusbaeck,
this is my pipelines.yml

  • pipeline.id: filebeat
    path.config: "C:/Software/LOGSTASH/conf/filebeat.conf"
  • pipeline.id: dmz
    path.config: "C:/Software/LOGSTASH/conf/winlogbeat.conf"

Configuration files simply have two output:

elasticsearch {
hosts => "host1.domain1.local:9200"
index => "filebeat-%{+YYYY.MM.DD}"
}

and the second

elasticsearch {
hosts => "host2.domain2.local:9200"
index => "winlogbeat-%{+YYYY.MM.DD}"
}

4

Any ideas guys?

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.