# Logstash data ouput to elasticsearch calculation

**URL:** <https://discuss.elastic.co/t/logstash-data-ouput-to-elasticsearch-calculation/195180>\
**Category:** Logstash\
**Created:** [August 14, 2019, 9:53am UTC](https://discuss.elastic.co/t/logstash-data-ouput-to-elasticsearch-calculation/195180 "2019-08-14T09:53:21Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Kevin\_f](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kevin_f/32/72456_2.png) [@Kevin\_f](https://discuss.elastic.co/u/Kevin_f)\
**Post date:** [August 14, 2019, 9:53am UTC](https://discuss.elastic.co/t/logstash-data-ouput-to-elasticsearch-calculation/195180/1 "2019-08-14T09:53:21Z")

</div>

Hello,

I am trying to find out how to see how much data is being outputted to elasticsearch from logstash servers. The logstash servers in question are hosted on VMWare at the moment.

The logstash server hosted on AWS, I can see how much data is coming out on the networkout within cloudwatch metrics.

How can I get a similar result on the logstash boxes themselves?  
Many thanks.

---

<div class="post-metadata">

**Author:** ![tobydickinson](https://avatars.discourse-cdn.com/v4/letter/t/d07c76/32.png) [@tobydickinson](https://discuss.elastic.co/u/tobydickinson)\
**Post date:** [September 4, 2019, 11:37am UTC](https://discuss.elastic.co/t/logstash-data-ouput-to-elasticsearch-calculation/195180/2 "2019-09-04T11:37:17Z")

</div>

Could you just use the index sizes on elastic as a guide?

---

<div class="post-metadata">

**Author:** ![Kevin\_f](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kevin_f/32/72456_2.png) [@Kevin\_f](https://discuss.elastic.co/u/Kevin_f)\
**Post date:** [September 5, 2019, 7:36am UTC](https://discuss.elastic.co/t/logstash-data-ouput-to-elasticsearch-calculation/195180/3 "2019-09-05T07:36:08Z")

</div>

Hi,

Thanks for getting back to me.

Sorry could you elaborate more on that?

Thanks.

Regards,

Kevin

---

<div class="post-metadata">

**Author:** ![tobydickinson](https://avatars.discourse-cdn.com/v4/letter/t/d07c76/32.png) [@tobydickinson](https://discuss.elastic.co/u/tobydickinson)\
**Post date:** [September 5, 2019, 8:21am UTC](https://discuss.elastic.co/t/logstash-data-ouput-to-elasticsearch-calculation/195180/4 "2019-09-05T08:21:31Z")

</div>

Are you splitting your indices based on days? If so, you could use cat API to view the size of the indices by visiting \<ELASTIC\_HOST\>:9200/\_cat/indices. Alternatively you could monitor the size of your index over a time period to get a rough idea of data rates.

---

<div class="post-metadata">

**Author:** ![Kevin\_f](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kevin_f/32/72456_2.png) [@Kevin\_f](https://discuss.elastic.co/u/Kevin_f)\
**Post date:** [September 5, 2019, 12:17pm UTC](https://discuss.elastic.co/t/logstash-data-ouput-to-elasticsearch-calculation/195180/5 "2019-09-05T12:17:46Z")

</div>

I see thank you. I will give that a go. In this case I would not have to install metric beat on logstash server?

---

<div class="post-metadata">

**Author:** ![tobydickinson](https://avatars.discourse-cdn.com/v4/letter/t/d07c76/32.png) [@tobydickinson](https://discuss.elastic.co/u/tobydickinson)\
**Post date:** [September 5, 2019, 1:04pm UTC](https://discuss.elastic.co/t/logstash-data-ouput-to-elasticsearch-calculation/195180/6 "2019-09-05T13:04:59Z")

</div>

That would not require that, no. That can give some useful metrics so I would still recommend considering that as an option as well but it wouldn't provide this data as far as I am aware.

---

<div class="post-metadata">

**Author:** ![philippkahr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/philippkahr/32/100137_2.png) [@philippkahr](https://discuss.elastic.co/u/philippkahr)\
**Post date:** [September 5, 2019, 1:52pm UTC](https://discuss.elastic.co/t/logstash-data-ouput-to-elasticsearch-calculation/195180/7 "2019-09-05T13:52:28Z")

</div>

if you are using basic license, you could leverage the monitoring tab inside elasticsearch. just configure your logstash to use monitoring

```auto
xpack.monitoring.enabled: true
xpack.monitoring.elasticsearch.hosts: ["1.2.2.3"]

```

After that the logstash node should pop up and give you information on how many events received and emitted are.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 3, 2019, 1:59pm UTC](https://discuss.elastic.co/t/logstash-data-ouput-to-elasticsearch-calculation/195180/8 "2019-10-03T13:59:37Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.