Do I understand correctly that the number of workers for a Logstash output is 1 by default?
Let's take Filebeat as an example:
The default value is documented for the Elasticsearch output:
The default value is
1.
But it's not mentioned for the Logstash output:
The number of workers per configured host publishing events to Logstash. This is best used with load balancing mode enabled. Example: If you have 2 hosts and 3 workers, in total 6 workers are started (3 for each host).
In my opinion, the documentation should be updated on this point so that users do not have to spend time researching this in the code.
This observation also applies to other beats - I have checked at least Metricbeat & Winlogbeat (it may also apply to all of them).