# I'm loosing data in my ELK stack **URL:** \ **Category:** Logstash\ **Created:** [November 3, 2015, 9:54am UTC](https://discuss.elastic.co/t/im-loosing-data-in-my-elk-stack/33615 "2015-11-03T09:54:14Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![billy6](https://avatars.discourse-cdn.com/v4/letter/b/cab0a1/32.png) [@billy6](https://discuss.elastic.co/u/billy6)\ **Post date:** [November 3, 2015, 9:54am UTC](https://discuss.elastic.co/t/im-loosing-data-in-my-elk-stack/33615/1 "2015-11-03T09:54:14Z")
Hello, I have been monitoring the data traffic and I have notice that I'm loosing a lot of messages, What could I do? Using REDIS buffer could be a solution but it consumes a lot of memory and I would like to study other alternatives. Thank you very much ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [November 3, 2015, 9:57am UTC](https://discuss.elastic.co/t/im-loosing-data-in-my-elk-stack/33615/2 "2015-11-03T09:57:00Z")
How are you receiving the messages? What's your approximate message rate? ---
**Author:** ![billy6](https://avatars.discourse-cdn.com/v4/letter/b/cab0a1/32.png) [@billy6](https://discuss.elastic.co/u/billy6)\ **Post date:** [November 3, 2015, 9:59am UTC](https://discuss.elastic.co/t/im-loosing-data-in-my-elk-stack/33615/3 "2015-11-03T09:59:37Z")
I'm receiving the messages via UDP (therefore is normal the message loss but I would like to minimize it) And the message rate is not fixed but sometimes I have 5000 or 10000 msgs/s. ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [November 3, 2015, 10:06am UTC](https://discuss.elastic.co/t/im-loosing-data-in-my-elk-stack/33615/4 "2015-11-03T10:06:55Z")
That's quite a lot. Setting up a broker for quick off-loading of messages should definitely help. I'd look for benchmarks of how many messages a single machine can receive under any circumstances, then add Logstash into the mix. If you can't receive at least 10k messages/s without doing anything with them (i.e. just dropping them on the floor) you have a bigger problem. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 5:24am UTC](https://discuss.elastic.co/t/im-loosing-data-in-my-elk-stack/33615/5 "2017-07-06T05:24:21Z")