With logstash version 1.5.1, my crashing issues went away. Great! Now I'd like to see about making sure my logstash cluster is sized correctly.
Currently have a number of logstash servers behind a DSR hardware lb vip. How would I know if I had too few servers, or too many? If too few, I'd assume higher and higher latency, and maybe memory pressure. I don't see that.
I have a mix of remote syslog to logstash, plus pulling logs from redis.
Any suggestions? Thanks.