I'm trying to improve the performance of Logstash when ingesting about 22,500 Netflow records/sec. I have read the general performance tuning tips here Is there any way to turn off the geoip plugin? Of the 22,500 flows/sec hitting Logstash, I only see about 7,000-8,000 hit Elastic. I assume the …

Improving capacity to handle high netflow rates

magnusbaeck (Magnus Bäck) October 18, 2017, 6:06am 2

Is there any way to turn off the geoip plugin?

Are you using the netflow module?

Topic		Replies	Views
Only get 900 netflow events/sec from 4 vCPU LS node Logstash	3	2482	May 26, 2018
Netflow High CPU utilization and poor throughput Logstash	4	2057	August 30, 2017
Netflow Codec : UDP receive errors Logstash	12	3446	May 11, 2018
(Logstash newbie) Logstash 5.0. 150k flows/min limit Logstash	5	595	December 14, 2016
UDP/Netflow Performance Logstash	4	2594	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Improving capacity to handle high netflow rates

Related topics