# Use multiple inputs configs w/single logstash instance

**URL:** https://discuss.elastic.co/t/use-multiple-inputs-configs-w-single-logstash-instance/39912
**Category:** Logstash
**Created:** [January 22, 2016, 5:59pm UTC](https://discuss.elastic.co/t/use-multiple-inputs-configs-w-single-logstash-instance/39912 "2016-01-22T17:59:48Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![Kaufusihm](https://avatars.discourse-cdn.com/v4/letter/k/bcef8e/32.png) [@Kaufusihm](https://discuss.elastic.co/u/Kaufusihm)
#### Post date: [January 22, 2016, 5:59pm UTC](https://discuss.elastic.co/t/use-multiple-inputs-configs-w-single-logstash-instance/39912/1 "2016-01-22T17:59:48Z")

</div>

Let me quickly define my Elastic stack.  
I'm currently just working with 3 different types of logs coming from 3 different machines.

Goal: I would like to handle all 3 logs w/my current elastic stack. How do I do this?

#1 Log type  
Windows event logs: WIndows 10  
NXlog sending eventlogs \> Logstash collector \> Redis-server \> Logstash Parser \> Elasticsearch \> Kibana

#2 Log type  
Windows application log: Windows server 2012  
Filebeat client \> Logstash collector \> Redis-server \> Logstash Parser \> Elasticsearch \> Kibana

#3 Glassfish server logs  
GF server sending log to windows machine  
Filebeat client \> Logstash collector \> Redis-server \> Logstash Parser \> Elasticsearch \> Kibana

---

<div class="post-metadata">

### Author: ![Joe\_Lawson](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/joe_lawson/32/3390_2.png) [@Joe\_Lawson](https://discuss.elastic.co/u/Joe_Lawson)
#### Post date: [January 22, 2016, 6:23pm UTC](https://discuss.elastic.co/t/use-multiple-inputs-configs-w-single-logstash-instance/39912/2 "2016-01-22T18:23:03Z")

</div>

I don't think you are missing anything here.

---

<div class="post-metadata">

### Author: ![Kaufusihm](https://avatars.discourse-cdn.com/v4/letter/k/bcef8e/32.png) [@Kaufusihm](https://discuss.elastic.co/u/Kaufusihm)
#### Post date: [January 22, 2016, 9:26pm UTC](https://discuss.elastic.co/t/use-multiple-inputs-configs-w-single-logstash-instance/39912/3 "2016-01-22T21:26:19Z")

</div>

Joe,

Thanks for the response. So I was curious how to handle my config files on my logstash instance.

Logstash Server Config file.

input {  
redis {  
host =\> "ip"  
type =\> "log"  
data\_type =\> "list"  
key =\> "logstash"  
}

}

input {  
tcp {  
type =\> "eventlog"  
port =\> 3000  
codec =\> "json"  
}  
}

filter {  
if [type] == "log" {  
grok {  
match =\> { "message" =\> "^[%{TIMESTAMP\_ISO8601:timestamp}] [%{DATA:server\_version}] [%{DATA:log\_level}] [%{DATA:unknown}] [%{JAVACLASS:class}] [%{DATA:thread}] [%{DATA:category}] [%{DATA:loglevel}] [[$" }

# add\_field =\> ["received\_at", "%{@timestamp}"]

```
}

```

}  
}

output {  
elasticsearch  
{  
hosts =\> ["hosts"]  
user =\> "ls\_admin"  
password =\> ""  
}  
stdout { codec =\> rubydebug }

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [January 24, 2016, 3:49am UTC](https://discuss.elastic.co/t/use-multiple-inputs-configs-w-single-logstash-instance/39912/4 "2016-01-24T03:49:22Z")

</div>

> [@Kaufusihm](#):
>
> So I was curious how to handle my config files on my logstash instance.

What do you mean?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 5:14am UTC](https://discuss.elastic.co/t/use-multiple-inputs-configs-w-single-logstash-instance/39912/5 "2017-07-06T05:14:36Z")

</div>


