# High CPU load when using Logstash file input on Windows

**URL:** <https://discuss.elastic.co/t/high-cpu-load-when-using-logstash-file-input-on-windows/21554>\
**Category:** Elasticsearch\
**Created:** [January 9, 2015, 9:06am UTC](https://discuss.elastic.co/t/high-cpu-load-when-using-logstash-file-input-on-windows/21554 "2015-01-09T09:06:36Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Vagif\_Abilov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vagif_abilov/32/788_2.png) [@Vagif\_Abilov](https://discuss.elastic.co/u/Vagif_Abilov)\
**Post date:** [January 9, 2015, 9:06am UTC](https://discuss.elastic.co/t/high-cpu-load-when-using-logstash-file-input-on-windows/21554/1 "2015-01-09T09:06:36Z")

</div>

Hello,

We started using ELK stack to visuallize our logs, and we observe high CPU  
load on machines (Windows servers) where text logs are generated. There  
aren't many log files but they can be very large in size. They contain logs  
formatted as json documents so there shouldn't be much computation power to  
process them. Java process that hosts Logstash log shipper uses somewhat  
between 10 and 20% CPU, and that's more than our own applications.

Another observation: all log files are locked, we can't delete old log  
files while Logstash process is running.

Best regards

Vagif

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CA%2Bxi7%2B3W5Su2dkRBE3RcXf8ZSnrZ9FDmx%2BLwHYQGBDYUz0OGOg%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CA%2Bxi7%2B3W5Su2dkRBE3RcXf8ZSnrZ9FDmx%2BLwHYQGBDYUz0OGOg%40mail.gmail.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![Vagif\_Abilov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vagif_abilov/32/788_2.png) [@Vagif\_Abilov](https://discuss.elastic.co/u/Vagif_Abilov)\
**Post date:** [January 9, 2015, 10:03am UTC](https://discuss.elastic.co/t/high-cpu-load-when-using-logstash-file-input-on-windows/21554/2 "2015-01-09T10:03:07Z")

</div>

Oops, looks like Logstash has its own forum. Will try there.

Vagif

On Fri, Jan 9, 2015 at 10:06 AM, Vagif Abilov [vagif.abilov@gmail.com](mailto:vagif.abilov@gmail.com)  
wrote:

> Hello,
> 
> We started using ELK stack to visuallize our logs, and we observe high CPU  
> load on machines (Windows servers) where text logs are generated. There  
> aren't many log files but they can be very large in size. They contain logs  
> formatted as json documents so there shouldn't be much computation power to  
> process them. Java process that hosts Logstash log shipper uses somewhat  
> between 10 and 20% CPU, and that's more than our own applications.
> 
> Another observation: all log files are locked, we can't delete old log  
> files while Logstash process is running.
> 
> Best regards
> 
> Vagif

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CA%2Bxi7%2B3WCPi0R\_x-pESo05J43-c\_SQu3u12mBuWDgEMXwtsvLA%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CA%2Bxi7%2B3WCPi0R_x-pESo05J43-c_SQu3u12mBuWDgEMXwtsvLA%40mail.gmail.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 12:39am UTC](https://discuss.elastic.co/t/high-cpu-load-when-using-logstash-file-input-on-windows/21554/3 "2017-07-06T00:39:53Z")

</div>


