# Filebeat prerequisite

**URL:** <https://discuss.elastic.co/t/filebeat-prerequisite/172054>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [March 13, 2019, 4:00am UTC](https://discuss.elastic.co/t/filebeat-prerequisite/172054 "2019-03-13T04:00:06Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![gvsr1991](https://avatars.discourse-cdn.com/v4/letter/g/8491ac/32.png) [@gvsr1991](https://discuss.elastic.co/u/gvsr1991)\
**Post date:** [March 13, 2019, 4:00am UTC](https://discuss.elastic.co/t/filebeat-prerequisite/172054/1 "2019-03-13T04:00:06Z")

</div>

Hi Team,

I am using Filebeat + ElaseticSearch+ Kibana to monitor the WSO2 EI logs.

FIlebeat is installed in my WSO2 server and elasticsearch and kibana are in other server.

Once I have started the filebeat, the CPU utilization of the WSO2 is breaching 100 %, below are my system configs

4 core CPU  
8GB RAM

Can you please let me know the above metrics are enough for running Filebeat or and predefined prerequisite is there.

Thanks,  
Sasnaka

---

<div class="post-metadata">

**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\
**Post date:** [March 13, 2019, 2:21pm UTC](https://discuss.elastic.co/t/filebeat-prerequisite/172054/2 "2019-03-13T14:21:33Z")

</div>

It depends how many logs you have. The more logs filebeat needs to send, the higher the CPU usage. You can limit the number of active OS threads in filebeat by configuring `max_procs: 1` for example. Use OS tools like nice to limit resources further.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 10, 2019, 2:21pm UTC](https://discuss.elastic.co/t/filebeat-prerequisite/172054/3 "2019-04-10T14:21:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
