LOGSTASH Using different input index than the one specified

Elastic Stack Logstash
1

In logstash configuration file I set input to use "my _indsex" as input and "result" as output
after restarting logstash I found that the output have documents from another configuration input index

׳׳׳
input {

elasticsearch {
hosts => "http://xxx.yyy.zzz:9200"
user => "...."
password => "....."
index => "my_index"
size => 10000
#scroll => "1m"
docinfo => true
}

}

output
{
elasticsearch {
hosts => "http://xxx.yyy.zzz:9200"
user => "....."
password => "......."
index => "result"

    }

}
׳׳׳

2

Do you have multiple logstash configuration files? Are you using pipelines.yml to run each of them in its own pipeline?

3

Hi Badger

  • I have multiple configuration files
  • I don't use pipelines.yml . should I?

Thanks
Moshe

4

Yes. See this thread.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.