So currently i have an all in one setup with elastic, logstash, and kibana all sitting on the same host. I would like to add another logstash instance in our office network to take some of the parsing load. Is there anything i need to watch out for when setting this second logstash instance up
Be sure to name it something unique in the logstash.yml file and give each of your pipelines,inputs and filters a unique "id" it will help with troubleshooting later.
Also enable the monitoring xpack for Kibana in the .yml file so you can find out how much work each instance is doing.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.