Filebeat prerequisite

Elastic Stack Beats
1

Hi Team,

I am using Filebeat + ElaseticSearch+ Kibana to monitor the WSO2 EI logs.

FIlebeat is installed in my WSO2 server and elasticsearch and kibana are in other server.

Once I have started the filebeat, the CPU utilization of the WSO2 is breaching 100 %, below are my system configs

4 core CPU
8GB RAM

Can you please let me know the above metrics are enough for running Filebeat or and predefined prerequisite is there.

Thanks,
Sasnaka

2

It depends how many logs you have. The more logs filebeat needs to send, the higher the CPU usage. You can limit the number of active OS threads in filebeat by configuring max_procs: 1 for example. Use OS tools like nice to limit resources further.