Good day, I am currently processing the data from filebeat's system module using Logstash. The data provided by filebeat's system module (syslog and auth) is properly parsed but unfortunately it was saving the structured documents into two indices at the same time: E.g. filebeat-7.6.2-2020.11.15 …

[image] gonzalo2kx: Any suggestions on how I could improve this solution to avoid future issues? You could use pipellines .

Logstash saving data into two indices (Duplicated Data)

system (system) Closed December 14, 2020, 12:16am 3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Logstash saving to two different indexes at the same time Logstash	3	1324	November 27, 2017
Why does Logstash write into two indices? (default and custom ones) Logstash	5	1312	March 15, 2017
Duplicate entries for same data in multiple indices Logstash	3	1352	March 28, 2018
Logs duplicated in all indices Elasticsearch	2	1000	May 8, 2018
Problem with output elasticsearch data duplicate on index Logstash	5	2058	October 25, 2017