I am using logstash 7 with syslog as output plugin. The syslog server is not reachable for a quite a long time and persistent queue is growing as expected to the limit. But the persistent queue data size is growing beyond the max_queue size limit and filling up the entire disk space. The page and check point files count is kept on increasing. Is this expected behavior ? Is not the log stash not reads any input data when the max_queue_size_in_bytes limit is reached and out put plug-in is not reachable ? I am using beats and kafka as input plug-ins and syslog as output plug-in.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.