Logstash dropping events not accepting connections

Elastic Stack Logstash
1

I have a ELK box that is processing around 240 events per second and sending to Elasticsearch and Graphite.

At times when I'm trying to do a query in Kibana that takes a bit of searching, logstash will start dropping events.

Update: I was able to resolve the issue with using a message queue.

2

which version of logstash are you using, for a while now the logstash output should never drop events but retry forever. If you're not seeing this it may be a bug.

Any errors on the logstash logs?

3

My setup changed a bit recently so I'll have to see, but so far looks good, I was on 5.3.1 upgraded to 5.5.0 and added a message queue to the mix and decoupled the processing a bit.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.