Filebeat High CPU consumption on two of four hosts

Elastic Stack Beats
3

I have some solutions for you:

1) Download log files to non-production environment
By non-production environment I mean a server that does not negatively affect the service.

Use FB (filebeat) for sending these big files to your Log Management. You can use this tutorial.

2) CPU load by filebeat with respect to running application
You can set lowest priority of consuming CPU for Filebeat service. Lowest priority is 19.

vim /usr/lib/systemd/system/filebeat.service
[Service]
Nice=19

This is very useful in production environment.

Hope it will be useful for you.

1 Like