I am currently running a cluster of 5 logstash processors and 3 elasticsearch clusters and i would like to know the minimum amount of memory i would need to be able to process 5000k logs per second
That depends on your JVM, your Logstash configuration, the size of the events, and so on. 1000 events per second per Logstash instance doesn't sound too bad. I'd try with a couple of gigabytes.
Do you actually mean 5 million logs per second or is that a typo --> 5k ?
We do 5k on a single node and we have a lot of rules.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.