Logstash system config

Hi all,
I want to install Elastic + Logstash on several server
I'm just wondering, if there is no "Important System Config" Part for logstash like there is for elastic:

E.g. what should the headsize of logstash should be, when I have 64GB RAM und gave elastic already 32?

In most cases Logstash's default heap size should be enough, but it depends on your filters and the event rate.

We are talking about 300.000 events per minute coming over UDP and going into a sepearate pipeline. Filtered by the so many cisco filter.

Oh, that's quite a lot. There are no magic formulas for computing the needed heap size so it's something you'll have to tune.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.