# Using one logstash to monitor log with multiple rules **URL:** \ **Category:** Logstash\ **Created:** [May 11, 2018, 3:07am UTC](https://discuss.elastic.co/t/using-one-logstash-to-monitor-log-with-multiple-rules/131382 "2018-05-11T03:07:13Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![hfismyangel](https://avatars.discourse-cdn.com/v4/letter/h/b5ac83/32.png) [@hfismyangel](https://discuss.elastic.co/u/hfismyangel)\ **Post date:** [May 11, 2018, 3:07am UTC](https://discuss.elastic.co/t/using-one-logstash-to-monitor-log-with-multiple-rules/131382/1 "2018-05-11T03:07:14Z")
I want to monitor all log of a web server with one logstash.but this log has multiple rules. Now I use the ruby plug-in to match different log rules and output json.Then the json goes into elasticSearch，because of the json has multiple rules,so i don't konw how to mapper field into elasticSearch,how can i deal with it? thank you! ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [May 11, 2018, 4:56am UTC](https://discuss.elastic.co/t/using-one-logstash-to-monitor-log-with-multiple-rules/131382/2 "2018-05-11T04:56:48Z")
What do you mean by rules? If you can show us sample data and configuration rather than try to explain it, it will probably be a lot easier for someone to understand and help. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 8, 2018, 4:56am UTC](https://discuss.elastic.co/t/using-one-logstash-to-monitor-log-with-multiple-rules/131382/3 "2018-06-08T04:56:48Z")
Closed on June 8, 2018, 4:56am UTC This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.