# Multiple Pipeline Output

**URL:** <https://discuss.elastic.co/t/multiple-pipeline-output/255140>\
**Category:** Logstash\
**Created:** [November 12, 2020, 12:27am UTC](https://discuss.elastic.co/t/multiple-pipeline-output/255140 "2020-11-12T00:27:42Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![justinainsworth](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/justinainsworth/32/78782_2.png) [@justinainsworth](https://discuss.elastic.co/u/justinainsworth)\
**Post date:** [November 12, 2020, 12:27am UTC](https://discuss.elastic.co/t/multiple-pipeline-output/255140/1 "2020-11-12T00:27:42Z")

</div>

Continuing the discussion from [Multiple outputs?](https://discuss.elastic.co/t/multiple-outputs/43746/2):

According to this post, events can pass to multiple outputs. Is that the case when output is another pipeline? Or more specifically, if all conditionals are met, can an event be output to multiple pipelines?

```auto
output {
  
  if "OUTPUT_FILE" in [tags] {
    pipeline {
      id => "pl_900_f_event_output_routing => pl_912_o_identified"	
      send_to => "pl_912_o_identified"
    }
  }  
  if "_grokparsefailure " in [tags] {
    pipeline {
      id => "pl_900_f_event_output_routing => pl_913_o_grokfailure"	
      send_to => "pl_913_o_grokfailure"
    }
  }  
  
  if "OUTPUT_AZURE_SENTINEL_CEF " in [tags] {
    pipeline {
      id => "pl_900_f_event_output_routing => pl_921_o_azure_sentinel"	
      send_to => "pl_921_o_azure_sentinel"
    }
  } 
  if "OUTPUT_CASLC_ASA " in [tags] {
    pipeline {
      id => "pl_900_f_event_output_routing => pl_922_o_caslc_asa"	
      send_to => "pl_922_o_caslc_asa"
    }
  } 
  if "OUTPUT_CASLC_MERAKI " in [tags] {
    pipeline {
      id => "pl_900_f_event_output_routing => pl_923_o_acaslc_meraki"	
      send_to => "pl_923_o_acaslc_meraki"
    }
  } 
  
  if "OUTPUT_UNIDENTIFIED" in [tags] {
    pipeline {
      id => "pl_900_f_event_output_routing => pl_911_o_unidentified"	
      send_to => "pl_911_o_unidentified"
    }
  }
}

```

Events that are tagged "OUTPUT\_FILE" properly output, but nothing else.

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [November 12, 2020, 12:42am UTC](https://discuss.elastic.co/t/multiple-pipeline-output/255140/2 "2020-11-12T00:42:19Z")

</div>

> [@justinainsworth](#):
>
> if all conditionals are met, can an event be output to multiple pipelines?

Yes.

You know you have trailing spaces in most of those tags, right?

```
"OUTPUT_CASLC_MERAKI "

```

---

<div class="post-metadata">

**Author:** ![justinainsworth](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/justinainsworth/32/78782_2.png) [@justinainsworth](https://discuss.elastic.co/u/justinainsworth)\
**Post date:** [November 12, 2020, 1:05am UTC](https://discuss.elastic.co/t/multiple-pipeline-output/255140/3 "2020-11-12T01:05:03Z")

</div>

@Badger, I had stared at that config for a while, and I never noticed the trailing spaces. /)\_-)

That was it. Thanks.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 10, 2020, 1:05am UTC](https://discuss.elastic.co/t/multiple-pipeline-output/255140/4 "2020-12-10T01:05:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.