i have a basic question on logstash elasticsearch pipeline processing rate.
When i set flush_size to a value, does logstash wait until that size is reached before it starts sending it to es? if the size is not reached what happens?
how do i make it work for bulk and also non bulk requests dynamically based on size of the input.
That depends on what is limiting performance. If any of the outputs, e.g. Elasticsearch, is not able to handle higher throughput, adding Logstash instances may not help. If however Logstash, which usually is CPU bound, is the bottleneck, scaling up/out the Logstash layer may help.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.