# Logstash UDP input only processing ~1000 events/sec
**URL:** https://discuss.elastic.co/t/logstash-udp-input-only-processing-1000-events-sec/72887
**Category:** Logstash
**Created:** [January 26, 2017, 10:54am UTC](https://discuss.elastic.co/t/logstash-udp-input-only-processing-1000-events-sec/72887 "2017-01-26T10:54:10Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@sip](https://discuss.elastic.co/u/sip)
#### Post date: [January 26, 2017, 10:54am UTC](https://discuss.elastic.co/t/logstash-udp-input-only-processing-1000-events-sec/72887/1 "2017-01-26T10:54:10Z")
I have an 8core 32GB Windows VM running LS 2.3.2 ES 2.3.3 Kibana 4.5.1 and I max out the CPUs with 4 UDP workers and process ~1,000 UDP netflow events/sec. This seems really low compared to what I have seen other rates. It is the basic input and output to ES - no filters.. Any ideas why I can't process any more with an 8core? Changing udp queue size also didn't make a difference..
input {
udp {
port =\> 9995
workers =\> 4
codec =\> netflow {
definitions =\> "c:\elk\logstash\vendor\bundle\jruby\1.9\gems\logstash-codec-netflow-2.0.5\lib\logstash\codecs\netflow\netflow.yaml"
versions =\> [9]
}
}
}
output {
elasticsearch {
index =\> "logstash\_netflow-%{+YYYY.MM.dd}"
hosts =\> ["localhost:9200"]
}
}
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [January 29, 2017, 6:53pm UTC](https://discuss.elastic.co/t/logstash-udp-input-only-processing-1000-events-sec/72887/2 "2017-01-29T18:53:05Z")
Have you measured what kind of indexing performance you can get from your ES cluster, i.e. have you ruled out ES as the bottleneck? 1000 events/s seems low, but it's not unreasonably low for a one-node ES cluster.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [February 26, 2017, 6:53pm UTC](https://discuss.elastic.co/t/logstash-udp-input-only-processing-1000-events-sec/72887/3 "2017-02-26T18:53:10Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.