# Logstash UDP input keeps losing data
**URL:** https://discuss.elastic.co/t/logstash-udp-input-keeps-losing-data/303215
**Category:** Logstash
**Created:** [April 26, 2022, 6:08am UTC](https://discuss.elastic.co/t/logstash-udp-input-keeps-losing-data/303215 "2022-04-26T06:08:52Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@co88liwan](https://discuss.elastic.co/u/co88liwan)
#### Post date: [April 26, 2022, 6:08am UTC](https://discuss.elastic.co/t/logstash-udp-input-keeps-losing-data/303215/1 "2022-04-26T06:08:52Z")
Hi there,
We encountered an issue that Logstash input UDP plugin consistently losing data.
From tcpdump analysis we know the data indeed **reached** the VM, I also tested with Logstash file output plugin and I saw the data is missing in the output file so I can pretty sure the UDP input does not ingest all of them from host machine network stack.
I wonder if the Logstash UDP input dropped packets, do you know where can I get information on that?
Anyone has similar issue can you please educate me where is the entrypoint to fix this issue? I tried to double the UDP queue\_size and pipeline.batch.size, but not ideal.
Thanks for your help!
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [April 26, 2022, 5:11pm UTC](https://discuss.elastic.co/t/logstash-udp-input-keeps-losing-data/303215/2 "2022-04-26T17:11:36Z")
UDP is not a reliable transport. By design, it will drop messages if it does not have space to buffer them. I think your only options are to increase the queue size in the logstash input or increase the buffering in the TCP stack itself.
---
### Author:  [@co88liwan](https://discuss.elastic.co/u/co88liwan)
#### Post date: [April 27, 2022, 12:24am UTC](https://discuss.elastic.co/t/logstash-udp-input-keeps-losing-data/303215/3 "2022-04-27T00:24:41Z")
Thanks @Badger , I will try that.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 25, 2022, 12:25am UTC](https://discuss.elastic.co/t/logstash-udp-input-keeps-losing-data/303215/4 "2022-05-25T00:25:22Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.