Logstash file descriptors keep increasing

Elastic Stack Logstash
1

i'am using logstash version logstash 6.4.3. The problem is the number of file descriptors that keeps increasing and each time i restart logstash it gets back to normal then increases again.
Is that normal behavior ?

2

Maybe. What does your configuration look like?

3

My logstash.yml is like this:

path.data: /var/lib/logstash
config.reload.automatic: true
config.reload.interval: 300s
path.logs: /var/log/logstash

and since i'am getting syslog logs, my conf for syslog is:

    input {
    syslog {
        port => 5040
    }
}
  output {
    elasticsearch {
        hosts => ["<ip1>:9200", "<ip2>:9200", "<ip3>:9200"]
        index => "srv-syslog-%{+YYYY.MM.dd}"
    }
}
4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.