# Running mutliple CONF file for logstash

**URL:** https://discuss.elastic.co/t/running-mutliple-conf-file-for-logstash/47139
**Category:** Logstash
**Created:** [April 12, 2016, 3:25pm UTC](https://discuss.elastic.co/t/running-mutliple-conf-file-for-logstash/47139 "2016-04-12T15:25:49Z")
**Posts on this page:** 8
**Page:** 1

<div class="post-metadata">

### Author: ![Sameer\_Panicker](https://avatars.discourse-cdn.com/v4/letter/s/d9b06d/32.png) [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)
#### Post date: [April 12, 2016, 3:25pm UTC](https://discuss.elastic.co/t/running-mutliple-conf-file-for-logstash/47139/1 "2016-04-12T15:25:49Z")

</div>

I have mutliple log files present under different folder. To make things simpler and easy to manage, based on the patterns I have created 5 different conf files.  
e,g.  
logstash-Exception.conf,  
logstash-eventsource.conf,  
logstash-monitor.conf, etc.

I don't want to merge all the conf into one big file. I want to keep it separate.

My query is - If i ran all the conf files together, what issues i might face in higher env. or is there any other best practices that I should consider.

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [April 13, 2016, 1:41am UTC](https://discuss.elastic.co/t/running-mutliple-conf-file-for-logstash/47139/2 "2016-04-13T01:41:33Z")

</div>

Logstash will merge these all into a single file when it starts up, if they are held under the `conf.d` directory.

Are you using conditionals to make sure that the various inputs are only being processed via their respective filters and output?

---

<div class="post-metadata">

### Author: ![Sameer\_Panicker](https://avatars.discourse-cdn.com/v4/letter/s/d9b06d/32.png) [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)
#### Post date: [April 13, 2016, 3:57am UTC](https://discuss.elastic.co/t/running-mutliple-conf-file-for-logstash/47139/3 "2016-04-13T03:57:32Z")

</div>

Yes i do have conditions set.

But what did you mean by conf.d directory ?

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [April 13, 2016, 4:01am UTC](https://discuss.elastic.co/t/running-mutliple-conf-file-for-logstash/47139/4 "2016-04-13T04:01:26Z")

</div>

From [https://www.elastic.co/guide/en/logstash/current/command-line-flags.html](https://www.elastic.co/guide/en/logstash/current/command-line-flags.html)

> -f, --config CONFIGFILE  
> Load the Logstash config from a specific file, directory, or a wildcard. If  
> given a directory or wildcard, config files will be read from the directory in  
> alphabetical order.

And `conf.d` is the adhoc standard for linux for such a config directory.

---

<div class="post-metadata">

### Author: ![Sameer\_Panicker](https://avatars.discourse-cdn.com/v4/letter/s/d9b06d/32.png) [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)
#### Post date: [April 13, 2016, 4:20am UTC](https://discuss.elastic.co/t/running-mutliple-conf-file-for-logstash/47139/5 "2016-04-13T04:20:50Z")

</div>

I am currently using -f command to start all my logstash conf.

I just wanted to know that if there is any overhead or issues doing this. If there isnt any, then I am good to go ahead.

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [April 13, 2016, 4:21am UTC](https://discuss.elastic.co/t/running-mutliple-conf-file-for-logstash/47139/6 "2016-04-13T04:21:32Z")

</div>

You should be fine.

---

<div class="post-metadata">

### Author: ![Sameer\_Panicker](https://avatars.discourse-cdn.com/v4/letter/s/d9b06d/32.png) [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)
#### Post date: [April 13, 2016, 4:22am UTC](https://discuss.elastic.co/t/running-mutliple-conf-file-for-logstash/47139/7 "2016-04-13T04:22:11Z")

</div>

Great. Thanks Mark 🙂

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 5:02am UTC](https://discuss.elastic.co/t/running-mutliple-conf-file-for-logstash/47139/8 "2017-07-06T05:02:37Z")

</div>


