# What is the best practice for multiple table? Multiple logstash config or single config?

**URL:** https://discuss.elastic.co/t/what-is-the-best-practice-for-multiple-table-multiple-logstash-config-or-single-config/311277
**Category:** Logstash
**Created:** [August 3, 2022, 8:38am UTC](https://discuss.elastic.co/t/what-is-the-best-practice-for-multiple-table-multiple-logstash-config-or-single-config/311277 "2022-08-03T08:38:52Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![myx](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/myx/32/109182_2.png) [@myx](https://discuss.elastic.co/u/myx)
#### Post date: [August 3, 2022, 8:38am UTC](https://discuss.elastic.co/t/what-is-the-best-practice-for-multiple-table-multiple-logstash-config-or-single-config/311277/1 "2022-08-03T08:38:52Z")

</div>

Hi,  
I just learned ELK and I'm confused about this use case for its Logstash implementation for a project that has quite a bad DB design...

So I have index in Elasticsearch called **book**. Inside it, there's a short information about it's _bookshelf_ which has information about it's _tag_ and _type_. The index is like this

```auto
{
    "id": 12345,
    "title": "Wee Woo",
    "publisher": "asdasda",
    ...
    "bookshelf": {
        "id": 45,
        "type": {
            "id" : 12,
            "name": "hardcover",
            "color_code": "blue"
        },
        "tag": {
            "id": 23,
            "name": "historical"
        }
    }
}

```

The _bookshelf_ object is taken from table "bookshelf", "bookshelf\_type", "bookshelf\_to\_tag", and "bookshelf\_tag" (can't change the table).

My question is, which one would be the best practice, given that each app has the same resource and capability, and point to that one **book** index?  
a. 1 Logstash app that joins all table  
b. 2 Logstash app (1 joins bookshelf and bookshelf\_tag & 1 joins bookshelf and bookshelf\_type)  
c. 3 Logstash app

Thanks a lot

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 31, 2022, 8:39am UTC](https://discuss.elastic.co/t/what-is-the-best-practice-for-multiple-table-multiple-logstash-config-or-single-config/311277/2 "2022-08-31T08:39:24Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.