# Logstash logs filling up disk. How to configure log4j?

**URL:** https://discuss.elastic.co/t/logstash-logs-filling-up-disk-how-to-configure-log4j/326207
**Category:** Logstash
**Created:** [February 22, 2023, 5:29pm UTC](https://discuss.elastic.co/t/logstash-logs-filling-up-disk-how-to-configure-log4j/326207 "2023-02-22T17:29:13Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![Thijsvdp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thijsvdp/32/146696_2.png) [@Thijsvdp](https://discuss.elastic.co/u/Thijsvdp)
#### Post date: [February 22, 2023, 5:29pm UTC](https://discuss.elastic.co/t/logstash-logs-filling-up-disk-how-to-configure-log4j/326207/1 "2023-02-22T17:29:13Z")

</div>

Hi all,

We are currently facing an issue where Logstash fills up disk space on some of the nodes on our K8s cluster by outputting entire events to stdout. I am aware that I can change the loglevel of Logstash as a whole or that of the Elasticsearch output plugin (the one generating the big outputs to stdout). Currently I can do:

```auto
logger.elasticsearchoutput.name = logstash.outputs.elasticsearch
logger.elasticsearchoutput.level = error

```

However, this would also silence other important warnings. Would it be possible to configure the log4j loggers to filter out specific warnings containing some text? I have been searching, but cannot find on how to do it in Logstash.

I know there is a `failure_type_logging_whitelist` option in the ES output plugin but that does not work: [400 and 404 errors do not honour the failure\_type\_logging\_whitelist option · Issue #965 · logstash-plugins/logstash-output-elasticsearch · GitHub](https://github.com/logstash-plugins/logstash-output-elasticsearch/issues/965)

Thanks in advance.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 22, 2023, 5:29pm UTC](https://discuss.elastic.co/t/logstash-logs-filling-up-disk-how-to-configure-log4j/326207/2 "2023-03-22T17:29:41Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
