So far I have been using logstash's default "file" input plugin. I am giving filebeat a try with logstash.
Filebeat gives me a significant performance boost when it comes to reading large logfiles, this is great.
However, I noticed something else:
When appending a single log line manually to logstash through the filebeat input plugin and a simple stdout output without any additional processing in the middle, my payload is taking a lot longer to be processed (I'm talking >5seconds delay complared to logstash input plugin).
My filebeat config is bare minimum. Is there anything I can do to improve this ?