# Logstash not working on selected servers in production

**URL:** <https://discuss.elastic.co/t/logstash-not-working-on-selected-servers-in-production/99795>\
**Category:** Logstash\
**Created:** [September 8, 2017, 5:28am UTC](https://discuss.elastic.co/t/logstash-not-working-on-selected-servers-in-production/99795 "2017-09-08T05:28:37Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![xyz\_12](https://avatars.discourse-cdn.com/v4/letter/x/5e9695/32.png) [@xyz\_12](https://discuss.elastic.co/u/xyz_12)\
**Post date:** [September 8, 2017, 5:28am UTC](https://discuss.elastic.co/t/logstash-not-working-on-selected-servers-in-production/99795/1 "2017-09-08T05:28:37Z")

</div>

since the issue is related with PROD in terms of logstash relted and the same issue was occured in lower level environment.  
. However we have gone through the logs resepect to the server and noticed the below exception. so what we are thinking  
that it the threshold reached to 1500000 the server has to be [restarted.so](http://restarted.so) kindly let us know is this good approch? if yes then we  
can go ahead with that else kindly suggest to us any solution for this.

:timestamp=\>"2017-06-22T05:40:45.135000+0000", :message=\>"Redis key size has hit a congestion threshold 500000 suspending output for 5 seconds", :level=\>:warn}"

could u please give me any one solution for this .

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [September 8, 2017, 8:23am UTC](https://discuss.elastic.co/t/logstash-not-working-on-selected-servers-in-production/99795/2 "2017-09-08T08:23:25Z")

</div>

Doesn't this indicate that Logstash is pushing data to Redis faster than the reading party is able to process it? If so the obvious solution is to speed up the processing.

---

<div class="post-metadata">

**Author:** ![xyz\_12](https://avatars.discourse-cdn.com/v4/letter/x/5e9695/32.png) [@xyz\_12](https://discuss.elastic.co/u/xyz_12)\
**Post date:** [September 8, 2017, 8:34am UTC](https://discuss.elastic.co/t/logstash-not-working-on-selected-servers-in-production/99795/3 "2017-09-08T08:34:27Z")

</div>

Can I increase threshold value 1500000 ?

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [September 8, 2017, 8:51am UTC](https://discuss.elastic.co/t/logstash-not-working-on-selected-servers-in-production/99795/4 "2017-09-08T08:51:31Z")

</div>

Probably, but why do you think that'll solve the problem? The congestion threshold is there for a reason.

If you're filling a bath tub at a higher rate that you're draining it, switching to a larger bathtub will only give temporary relief. Your drain is still too slow.

---

<div class="post-metadata">

**Author:** ![xyz\_12](https://avatars.discourse-cdn.com/v4/letter/x/5e9695/32.png) [@xyz\_12](https://discuss.elastic.co/u/xyz_12)\
**Post date:** [September 8, 2017, 8:59am UTC](https://discuss.elastic.co/t/logstash-not-working-on-selected-servers-in-production/99795/5 "2017-09-08T08:59:00Z")

</div>

cloud please give valid solution for logstash

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [September 14, 2017, 9:38am UTC](https://discuss.elastic.co/t/logstash-not-working-on-selected-servers-in-production/99795/6 "2017-09-14T09:38:42Z")

</div>

How have you determined that Logstash is the bottleneck? What throughput are you currently seeing and what throughput are your downstream systems, e.g. Elasticsearch, able to handle?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 12, 2017, 9:38am UTC](https://discuss.elastic.co/t/logstash-not-working-on-selected-servers-in-production/99795/7 "2017-10-12T09:38:49Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
