I commented one of two my inputs in config file, but I can see in logs that it is still starting...
13:59:39.989 [[main]<udp] INFO logstash.inputs.udp - Starting UDP listener {:address=>"0.0.0.0:11514"}
13:59:39.995 [[main]-pipeline-manager] INFO logstash.inputs.tcp - Starting tcp input listener {:address=>"0.0.0.0:11666"}
below relevant part of my config:
input {
udp {
port => 11514
type => "threat"
#workers => 4
queue_size => 8000 # default 2000
}
#tcp {
#port => 11666
#type => "debug"
#}
}