# Multiple Pipeline configuration file which belong to same type

**URL:** <https://discuss.elastic.co/t/multiple-pipeline-configuration-file-which-belong-to-same-type/77088>\
**Category:** Logstash\
**Created:** [March 2, 2017, 5:30am UTC](https://discuss.elastic.co/t/multiple-pipeline-configuration-file-which-belong-to-same-type/77088 "2017-03-02T05:30:17Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![JasonT](https://avatars.discourse-cdn.com/v4/letter/j/df705f/32.png) [@JasonT](https://discuss.elastic.co/u/JasonT)\
**Post date:** [March 2, 2017, 5:30am UTC](https://discuss.elastic.co/t/multiple-pipeline-configuration-file-which-belong-to-same-type/77088/1 "2017-03-02T05:30:17Z")

</div>

Hi, all,  
If I have multiple Pipeline configuration file which belong to same type (all input from syslog ), each file content is difference type device( e.g,. firewall, switch, server ).  
How to identify(like added any determine method if..else..etc..)?

Because right now if I put all file in same directory ( /etc/logstash/conf.d/ ) it will cause parsing fail.

Has anyone encountered the same problem before? If yes, could you share your experience, thank you.🙂

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [March 2, 2017, 7:18am UTC](https://discuss.elastic.co/t/multiple-pipeline-configuration-file-which-belong-to-same-type/77088/2 "2017-03-02T07:18:19Z")

</div>

This question pops up all the time. Make sure there's some kind of way to distinguish different kinds of events. Different `type` fields is typical but sometimes not sufficient. Then add conditionals to choose which filters to apply to which messages.

[https://www.elastic.co/guide/en/logstash/current/event-dependent-configuration.html](https://www.elastic.co/guide/en/logstash/current/event-dependent-configuration.html)

---

<div class="post-metadata">

**Author:** ![JasonT](https://avatars.discourse-cdn.com/v4/letter/j/df705f/32.png) [@JasonT](https://discuss.elastic.co/u/JasonT)\
**Post date:** [March 2, 2017, 4:19pm UTC](https://discuss.elastic.co/t/multiple-pipeline-configuration-file-which-belong-to-same-type/77088/3 "2017-03-02T16:19:34Z")

</div>

Thank you. : )

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 30, 2017, 4:19pm UTC](https://discuss.elastic.co/t/multiple-pipeline-configuration-file-which-belong-to-same-type/77088/4 "2017-03-30T16:19:58Z")

</div>

Closed on March 30, 2017, 4:19pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.