# Logstash with filebeat and batching

**URL:** <https://discuss.elastic.co/t/logstash-with-filebeat-and-batching/246597>\
**Category:** Logstash\
**Created:** [August 27, 2020, 10:30am UTC](https://discuss.elastic.co/t/logstash-with-filebeat-and-batching/246597 "2020-08-27T10:30:04Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Carlos\_Magalhaes](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carlos_magalhaes/32/74604_2.png) [@Carlos\_Magalhaes](https://discuss.elastic.co/u/Carlos_Magalhaes)\
**Post date:** [August 27, 2020, 10:30am UTC](https://discuss.elastic.co/t/logstash-with-filebeat-and-batching/246597/1 "2020-08-27T10:30:04Z")

</div>

Hi all,

I know Logstash isn't made to be a batch processing tool i.e. only process logs at a certain period or time?

Scenario - I have large amounts of logs coming from a firewall via filebeat to a logstash server. It works well but the processing is taking quite a bit of the servers resources. I would like to process all these logs at night though.

Now I could start and stop the Logstash service but what happens to the filebeat service on the firewall since it can't reach the logstash service. How much does it buffer for a batch before it starts dropping the logs or will it send all the logs since the last time it could contact the logstash server?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 24, 2020, 10:30am UTC](https://discuss.elastic.co/t/logstash-with-filebeat-and-batching/246597/2 "2020-09-24T10:30:22Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.