Logstash Parsing takes too much time for processing

Hey,

My logstash has multiple lookups and various grok parsing too
The normal logs count without parsing is 500-600 eps
but with filter plugin in is 100-150 eps

Please Help needed

Thanks in advance

@Rohit_Kumbhar can you elaborate on what groks and lookups you are using.

Adding groks will add additional latency, but it really goes to what you are using.

Thanks

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.