Hi,
What i've read on the subject of backpressure says that when logstash becomes overloaded it will apply backpressure to throttle tranmission rates from clients...
Can i ask what logstash uses as the determinant of being 'overloaded'? Is it message rates, message size, something else, or a combination of factors?
I ask because I'm seeing some (journalbeat) senders being throttled but not others. Shouldn't all senders be throttled by the beats input? The throttled sources are sending some very large messages hence my wondering whether message size is a factor here...
Regards,
David