I am using logstash aggregate filter to aggregate two log lines with same "uuid"
But in the documentation, it is mentioned that " You should be very careful to set Logstash filter workers to 1 (
-w 1 flag) for this filter to work correctly otherwise events may be processed out of sequence and unexpected results will occur."
Since my system has a considerable traffic I am using the default number of workers " Number of the host’s CPU cores"
Because of this, I have found out that most of the logs were not properly aggregated.
Do we have any alternative method to execute the aggregation functionality by keeping multiple workers?