# How to set multiple logstash for only one logfile?

**URL:** <https://discuss.elastic.co/t/how-to-set-multiple-logstash-for-only-one-logfile/46940>\
**Category:** Logstash\
**Created:** [April 11, 2016, 5:19am UTC](https://discuss.elastic.co/t/how-to-set-multiple-logstash-for-only-one-logfile/46940 "2016-04-11T05:19:41Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![logstash](https://avatars.discourse-cdn.com/v4/letter/l/8dc957/32.png) [@logstash](https://discuss.elastic.co/u/logstash)\
**Post date:** [April 11, 2016, 5:19am UTC](https://discuss.elastic.co/t/how-to-set-multiple-logstash-for-only-one-logfile/46940/1 "2016-04-11T05:19:41Z")

</div>

My log-server specification is not good(RAM 8g, cpu 2.4GHz).  
So I disappointed for slowly collecting log.  
I checked my logstash performance(about 400/eps) through elasticsearch count.  
I already tried using two logstash, But just collected double-size log.  
I want multiple logstash for one log-file.  
If that is possible, How can I set multiple logstash?

I don't set logstash, elasticsearch configuration except logstash.conf.  
if I set logstash, elasticsearch configuration, how speed increase ?  
Let me know, configuration detailed.

# logstash.conf

input  
{  
file  
{  
path =\> ["C:/logs/filelog\_%{+YYYY-MM-dd}.csv"]  
type =\> "sdkNormalLog"  
}  
}

output  
{  
elasticsearch  
{  
hosts =\> "127.0.0.1:9200"  
}  
}

# test result

2016.04.11 13:45 start 2600400  
2016.04.11 14:06 end 3200400

600000  
test result : 476/eps, 28571/epm,

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [April 11, 2016, 5:22am UTC](https://discuss.elastic.co/t/how-to-set-multiple-logstash-for-only-one-logfile/46940/2 "2016-04-11T05:22:02Z")

</div>

What version are you running? What JVM?  
Did you try increasing workers or threads?

> [@logstash](#):
>
> path =\> ["C:/logs/filelog\_%{+YYYY-MM-dd}.csv"]

Does that even work? I haven't seen it before.

---

<div class="post-metadata">

**Author:** ![logstash](https://avatars.discourse-cdn.com/v4/letter/l/8dc957/32.png) [@logstash](https://discuss.elastic.co/u/logstash)\
**Post date:** [April 11, 2016, 7:20am UTC](https://discuss.elastic.co/t/how-to-set-multiple-logstash-for-only-one-logfile/46940/3 "2016-04-11T07:20:15Z")

</div>

logstash 2.3.0 , elasticsearch 2.3.0

java 1.8.0 77

I don't know how to increase workers or threads?

is it output option in logstash configuration ?

I saw that logstash start \>\> Settings : Default pipeline workers: 4

Does that even work? I haven't seen it before.  
~\>\>\>\>\> yes, good to work. that path mean today.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [April 11, 2016, 7:20am UTC](https://discuss.elastic.co/t/how-to-set-multiple-logstash-for-only-one-logfile/46940/4 "2016-04-11T07:20:44Z")

</div>

You should upgrade LS to 2.3.1, there were a few problems with the 2.3.0 release.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:02am UTC](https://discuss.elastic.co/t/how-to-set-multiple-logstash-for-only-one-logfile/46940/5 "2017-07-06T05:02:58Z")

</div>