The documentation says what the harvest_buffer_size
setting of the log
input is for, but nothing about why one might want to change it. Log input | Filebeat Reference [7.17] | Elastic
I asked about this in another post and got a reply:
tweaking
harvester_buffer_size
value has impact on the performance. When optimisation is a concern it is possible to set the most efficient value that can vary according to the environment.
Harvester_buffer_size - why increase it? - #2 by Andrea_Spacca
But my follow up question, How would one know what the most efficient value might be?, got no response. So how would one know?