ELK stack issue with CDN data

Hi guys,

I am having issue with ELK stack, specially with CDN data.
The problem is event count is, let me explore.

Basically, I've ELK setup on prod which has 6.3 version, when I'm starting the filebeat agent on CDN host to send the logs to logstash it is working fine till 1 M event count ( probably for 10 mins ) and as soon as it reached 1 M event count the filebeat agent stop sending the data, I'm not sure what exactly the problem is - did anyone find such kind of behaviour with ELK ?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.