Hi there,
we are (still) using ELK stack 5.4 in a very simple singlenode Docker-Compose setup with persistent queue enabled:
queue.type: persisted
path.queue: /usr/share/logstash/queue
queue.max_bytes: 5gb
After reading this I wanted to give it a try, added the queue.drain: true setting to the configuration and stopped/started the logstash (docker compose) service. Then I stopped the service again (so the new draining setting should work).
When checking the filesystem I noticed the page is still there with 250MB size. Is this normal behaviour? Is there a way to check if the draining actually worked or how many elements are currently stored in the persistent queue?
Thank you!
Jens