# LOGSTASH Using different input index than the one specified

**URL:** <https://discuss.elastic.co/t/logstash-using-different-input-index-than-the-one-specified/314139>\
**Category:** Logstash\
**Created:** [September 11, 2022, 11:48am UTC](https://discuss.elastic.co/t/logstash-using-different-input-index-than-the-one-specified/314139 "2022-09-11T11:48:25Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Moshe\_Sharon1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/moshe_sharon1/32/110058_2.png) [@Moshe\_Sharon1](https://discuss.elastic.co/u/Moshe_Sharon1)\
**Post date:** [September 11, 2022, 11:48am UTC](https://discuss.elastic.co/t/logstash-using-different-input-index-than-the-one-specified/314139/1 "2022-09-11T11:48:25Z")

</div>

In logstash configuration file I set input to use "my \_indsex" as input and "result" as output  
after restarting logstash I found that the output have documents from another configuration input index

׳׳׳  
input {

elasticsearch {  
hosts =\> "[http://xxx.yyy.zzz:9200](http://xxx.yyy.zzz:9200)"  
user =\> "...."  
password =\> "....."  
index =\> "my\_index"  
size =\> 10000  
#scroll =\> "1m"  
docinfo =\> true  
}

}

output  
{  
elasticsearch {  
hosts =\> "[http://xxx.yyy.zzz:9200](http://xxx.yyy.zzz:9200)"  
user =\> "....."  
password =\> "......."  
index =\> "result"

```
    }

```

}  
׳׳׳

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [September 11, 2022, 4:13pm UTC](https://discuss.elastic.co/t/logstash-using-different-input-index-than-the-one-specified/314139/2 "2022-09-11T16:13:14Z")

</div>

> [@Moshe\_Sharon1](#):
>
> after restarting logstash I found that the output have documents from another configuration input index

Do you have multiple logstash configuration files? Are you using pipelines.yml to run each of them in its own pipeline?

---

<div class="post-metadata">

**Author:** ![Moshe\_Sharon1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/moshe_sharon1/32/110058_2.png) [@Moshe\_Sharon1](https://discuss.elastic.co/u/Moshe_Sharon1)\
**Post date:** [September 12, 2022, 5:41am UTC](https://discuss.elastic.co/t/logstash-using-different-input-index-than-the-one-specified/314139/3 "2022-09-12T05:41:34Z")

</div>

Hi Badger

- I have multiple configuration files
- I don't use pipelines.yml . should I?

Thanks  
Moshe

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [September 12, 2022, 4:03pm UTC](https://discuss.elastic.co/t/logstash-using-different-input-index-than-the-one-specified/314139/4 "2022-09-12T16:03:54Z")

</div>

> [@Moshe\_Sharon1](#):
>
> I don't use pipelines.yml . should I?

Yes. See [this](https://discuss.elastic.co/t/entries-duplication/247448/2) thread.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 10, 2022, 4:04pm UTC](https://discuss.elastic.co/t/logstash-using-different-input-index-than-the-one-specified/314139/5 "2022-10-10T16:04:01Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.