I am using Logstash to parse my apache logs in addition to generating the
fields using kv{} and sending the output to ES and I am using the default
config.
What happens is when I parse the first 15 log days which are nearly
equivalent to 15 mil entry it works perfectly. However, when I add another
15 after the first finish it gets real real slow
I dont know what might have caused that. I do have storage and I haven't
changed the settings.
I am using Logstash to parse my apache logs in addition to generating the
fields using kv{} and sending the output to ES and I am using the default
config.
What happens is when I parse the first 15 log days which are nearly
equivalent to 15 mil entry it works perfectly. However, when I add another
15 after the first finish it gets real real slow
I dont know what might have caused that. I do have storage and I haven't
changed the settings.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.