I have a ELK box that is processing around 240 events per second and sending to Elasticsearch and Graphite.
At times when I'm trying to do a query in Kibana that takes a bit of searching, logstash will start dropping events.
Update: I was able to resolve the issue with using a message queue.
which version of logstash are you using, for a while now the logstash output should never drop events but retry forever. If you're not seeing this it may be a bug.
Any errors on the logstash logs?
My setup changed a bit recently so I'll have to see, but so far looks good, I was on 5.3.1 upgraded to 5.5.0 and added a message queue to the mix and decoupled the processing a bit.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.