# High Cpu utilization
**URL:** https://discuss.elastic.co/t/high-cpu-utilization/128794
**Category:** Elasticsearch
**Created:** [April 20, 2018, 5:26am UTC](https://discuss.elastic.co/t/high-cpu-utilization/128794 "2018-04-20T05:26:56Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@gangireddy\_l](https://discuss.elastic.co/u/gangireddy_l)
#### Post date: [April 20, 2018, 5:26am UTC](https://discuss.elastic.co/t/high-cpu-utilization/128794/1 "2018-04-20T05:26:56Z")
Hi,
Logstash and Elasticsearch are utilizing high cpu.
---
### Author:  [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [April 20, 2018, 5:47am UTC](https://discuss.elastic.co/t/high-cpu-utilization/128794/2 "2018-04-20T05:47:50Z")
Not sure what your question is.
May be tell what you are doing and what is the physical architecture.
Apparently you have one single node. 116 shards is May be too much.
---
### Author:  [@gangireddy\_l](https://discuss.elastic.co/u/gangireddy_l)
#### Post date: [April 20, 2018, 5:58am UTC](https://discuss.elastic.co/t/high-cpu-utilization/128794/3 "2018-04-20T05:58:39Z")
hello David thanks for your reply,
my physical architecture is
iam using centos7 with below configurations
Ram 16gb
CPU 8vcpu
harddisk 500gb
how to solve high cpu utilization problem with logstash and kiabana....in elk stack....
---
### Author:  [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [April 20, 2018, 6:35am UTC](https://discuss.elastic.co/t/high-cpu-utilization/128794/4 "2018-04-20T06:35:21Z")
What are you doing? Where are running ES, LS and Kibana ? On the same machine ?
---
### Author:  [@gangireddy\_l](https://discuss.elastic.co/u/gangireddy_l)
#### Post date: [April 20, 2018, 6:37am UTC](https://discuss.elastic.co/t/high-cpu-utilization/128794/5 "2018-04-20T06:37:04Z")
yes on same machine only
fetching logs from filebeat installed client machines.
---
### Author:  [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [April 20, 2018, 12:53pm UTC](https://discuss.elastic.co/t/high-cpu-utilization/128794/6 "2018-04-20T12:53:39Z")
Logstash can consume a lot of cpu by running grok, geoip and other filters.
It's recommended to have elasticsearch running alone.
Also you probably have too many shards per node.
May I suggest you look at the following resources about sizing:
[https://www.elastic.co/elasticon/conf/2016/sf/quantitative-cluster-sizing](https://www.elastic.co/elasticon/conf/2016/sf/quantitative-cluster-sizing)
> **[How many shards should I have in my Elasticsearch cluster?
| Elastic](https://www.elastic.co/blog/how-many-shards-should-i-have-in-my-elasticsearch-cluster)**
>
> Elasticsearch is a very versatile platform, that supports a variety of use cases, and provides great flexibility around data organisation and replication strategies. This flexibility can however somet...
> **[NetSecureDay: Managing your Black Friday Logs](https://speakerdeck.com/elastic/netsecureday-managing-your-black-friday-logs)**
>
> Surveiller une application complexe n’est pas une tâche aisée, mais avec les bons outils, ce n’est pas si sorcier. Néanmoins, des périodes fortes telles que les opérations de type « Black Friday » (Vendredi noir) ou période de Noël peuvent pousser...
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 18, 2018, 12:53pm UTC](https://discuss.elastic.co/t/high-cpu-utilization/128794/7 "2018-05-18T12:53:56Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.