I am using logspout to send logs to logstash and then onto elasticsearch. Occassionally I'm seeing some logs appear more than half an hour after they were produced.
Could someone help me understand where I can look to see where the backlog is. I think its in logstash but can't be certain.