# Logstash filebeat Performance

**URL:** <https://discuss.elastic.co/t/logstash-filebeat-performance/243707>\
**Category:** Logstash\
**Created:** [August 4, 2020, 12:54pm UTC](https://discuss.elastic.co/t/logstash-filebeat-performance/243707 "2020-08-04T12:54:54Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![eth](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/eth/32/120441_2.png) [@eth](https://discuss.elastic.co/u/eth)\
**Post date:** [August 4, 2020, 12:54pm UTC](https://discuss.elastic.co/t/logstash-filebeat-performance/243707/1 "2020-08-04T12:54:54Z")

</div>

* * *

I am sending kubernetes pod logs from filebeat to logstash via kafka plugin. Filebeat, Logstash and kafka running as pods in the single host.

```
         filebeat ==> Kafka ==> Logstash

```

when i checked the network bandwidth, the filebeat is sending around 50 Mb/s, where as logstash also receiving almost same. To avoid bottleneck's, I used a simple logstash config with no filters ( as shown below)

* * *

apiVersion: v1  
kind: ConfigMap  
metadata:  
name: logstash  
namespace: "{{ .Values.namespace }}"  
data:  
logstash.conf: |-  
input {  
kafka {  
bootstrap\_servers =\> "{{ .Values.config.kafkaService }}:{{ .Values.config.kafkaServicePort }}"  
codec =\> plain { charset =\> "UTF-8" }  
consumer\_threads =\> 1  
topics =\> ["T1-LOG","T2-LOG","T3-LOG"]  
decorate\_events =\> true  
}  
}  
output {  
stdout { codec =\> dots }  
}  
logstash.yml: |-  
http.host: "0.0.0.0"  
xpack.monitoring.enabled: false  
queue.type: memory

But when i sent the logs directely from filbeat to logstash (filebeat ===\> logstash), I am getting around 6Mb/s between logstash and filebeat.

* * *

apiVersion: v1  
kind: ConfigMap  
metadata:  
name: logstash  
namespace: "{{ .Values.namespace }}"  
data:  
logstash.conf: |-  
input {  
beats {  
port =\> 5044  
}  
}  
output {  
stdout { codec =\> dots }  
}  
logstash.yml: |-  
http.host: "0.0.0.0"  
xpack.monitoring.enabled: false  
queue.type: memory

What could be the possible reason for low througput when sending logs from filbeat to logstash ? how could I improve this performance ?

## logstash version : Logstash 6.6.0 Filebeat version : filebeat version 7.5.1

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 1, 2020, 12:54pm UTC](https://discuss.elastic.co/t/logstash-filebeat-performance/243707/2 "2020-09-01T12:54:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.