# Improve performance in a single-node deployment

**URL:** <https://discuss.elastic.co/t/improve-performance-in-a-single-node-deployment/149735>\
**Category:** Logstash\
**Created:** [September 24, 2018, 8:37pm UTC](https://discuss.elastic.co/t/improve-performance-in-a-single-node-deployment/149735 "2018-09-24T20:37:03Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Rakios](https://avatars.discourse-cdn.com/v4/letter/r/22d042/32.png) [@Rakios](https://discuss.elastic.co/u/Rakios)\
**Post date:** [September 24, 2018, 8:37pm UTC](https://discuss.elastic.co/t/improve-performance-in-a-single-node-deployment/149735/1 "2018-09-24T20:37:04Z")

</div>

Hi, I hope you can help me.

I'm currently trying to load a lot of logs that are almost xml. The problem comes because in a minute 20 logs files of 5mb are generated and logstash takes approximately 12 minutes to load them. Ideally logstash upload 20 files per minute.

I've been practicing all month to improve performance according to logstash and elasticsearch documentation

my configuration file

```
input {
  file {
    path => "/elastic/input/example/allarchives.log"
    start_position => "beginning"
   sincedb_path => "/dev/null"
     codec => multiline {
                         charset => "ISO-8859-1"
                         pattern => '\<\/GTD.*\>'
                         negate => true
                           what => "next"
                           max_lines => 2000
 }
   
  }
}
filter {
xml {
		source => "message"
    target => "doc"
    remove_field => ["message"]
}
}
output {
   elasticsearch {
     hosts => "http://localhost:9200"
     index => "example"
  }
stdout {}
}

```

I have logstash 6.4, elasticsearch 6.4 and kibana 6.4 running on a single-node, which has these specifications:

6 x Intel(R) Xeon(R) CPU E5-2698 v3 @ 2.30GHz  
RAM 24GB  
OS: Red Hat Enterprise linux 7

sorry for my bad english, I am attentive to your suggestions

I leave some screenshots of the configuration of the index and monitoring with kibana

![rendimiento1](https://us1.discourse-cdn.com/elastic/original/3X/e/d/edbae54b13967d7a34805e764e21ec8eea90d4cd.png)

 ![rendimiento2](https://us1.discourse-cdn.com/elastic/original/3X/5/1/51efeadecfbf76424035f66a66799b6e00362c5e.png)  
 ![rendimiento3](https://us1.discourse-cdn.com/elastic/original/3X/4/2/423ebe8e20013994b78a808f20408b2cddc06819.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 22, 2018, 8:50pm UTC](https://discuss.elastic.co/t/improve-performance-in-a-single-node-deployment/149735/2 "2018-10-22T20:50:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.