Hi,
Running elkstack 6.6 here.
I have these 3 logstash servers which all 3 connect to 1 coördinating node in my 6 node ES cluster (I understood this is the most performant way of doing this). All my application servers send their logging in a loadbalanced way to these logstashes via filebeat. What I notice is that 2 of the logstashes constantly have 110 connections open to the ESC node and the other even 114.
Is this normal behaviour? Can this number be altered? Should it to improve performance of ingest?
Thnx