Does anyone encounters double logs parsed by Logstash.
Indeed, it happens sometimes and not always that the entire log file is parsed two times. (Each log appears two times in Kibana.)
- Sincedb is healthy
- log file doesn't contain double records
But in the conf file, I've two input file with TYPE definition. In FILTER block I use the types in IF block to make a particular treatment as well in OUTPUT to sending to different Elasticseach indexes.