Logstash Monitoring Overview incorrect

Elastic Stack Logstash
1

While using monitoring in 5.3 we've noticed that the Logstash overview appears to be summarizing the EPS incorrectly. It appears to be displaying a single logstash node EPS count rather than a summary of all active Logstash nodes.

If we have 4 nodes processing ~1500 EPS, the LS overview should reflect an approximate count of 6000 EPS. Instead, it is showing ~1500 EPS in the overview. Meanwhile in ES Monitoring the aggregate EPS ingestion count appears correct. If you drill down in monitoring to individual LS nodes, the EPS data appears correct.

The incorrect overview:

image.png1299×580 73 KB

One of the (4) LS node drilldowns:

image.png1307×789 134 KB

ES Overview showing the correct aggregate EPS count being ingested:

image.png1304×756 99.9 KB

This has been previously reported here: Possbile Kibana bug for Logstash monitoring

2

Updated in: Possbile Kibana bug for Logstash monitoring

This bug was fixed in 5.2.1 and it's ironically a bug that it persisted in 5.3. The code never got merged for 5.3.0 unfortunately. This should be fixed for 5.3.1.

Thanks,
Chris

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.