Logstash pipelines isolation

Elastic Stack Logstash
1

Hi guys,
i have logstash (v6) where i am using 2 pipelines, defined like this:

- pipeline.id: pipe1
  path.config: "/etc/logstash/conf.d/pipelines/pipe1.conf"
  pipeline.workers: 1
- pipeline.id: pipe2
  path.config: "/etc/logstash/conf.d/pipelines/pipe2.conf"
  pipeline.workers: 1

And lets have config in pipe1.conf

input {
  syslog {
    port => 514
    type => type1
  }
}

filter {
  if [type] == "type1" { ... }
}

And pipe2.conf

input {
  syslog {
    port => 515
    type => type2
  }
}

filter {
  if [type] == "type2" { ... }
}

Question :

  • Do i need to do inside filter check for type (if [type] == "type1") ?
  • Are all events, which "enters" "pipe1" through beats listening on port 514 "isolated" from filter in "pipe2" ?

Thank you very much
Martin

2

Do i need to do inside filter check for type (if [type] == "type1") ?

No.

Are all events, which "enters" "pipe1" through beats listening on port 514 "isolated" from filter in "pipe2" ?

Yes.

2 Likes
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.