# Multiple Logstash to a single Elasticsearch

**URL:** https://discuss.elastic.co/t/multiple-logstash-to-a-single-elasticsearch/216764
**Category:** Logstash
**Created:** [January 28, 2020, 7:07am UTC](https://discuss.elastic.co/t/multiple-logstash-to-a-single-elasticsearch/216764 "2020-01-28T07:07:58Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![Prajwal\_Bhusari](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/prajwal_bhusari/32/61515_2.png) [@Prajwal\_Bhusari](https://discuss.elastic.co/u/Prajwal_Bhusari)
#### Post date: [January 28, 2020, 7:07am UTC](https://discuss.elastic.co/t/multiple-logstash-to-a-single-elasticsearch/216764/1 "2020-01-28T07:07:58Z")

</div>

I had to make a log analyzer. My friend has created a same thing last year to analyze log using ELK stack but it take 30-40 mins for logstash processing in his project. Is there any way that I can use multiple Logstash instances to process log data and then pass it on to ElasticSearch?  
So that time required will be less.

---

<div class="post-metadata">

### Author: ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [January 28, 2020, 3:35pm UTC](https://discuss.elastic.co/t/multiple-logstash-to-a-single-elasticsearch/216764/2 "2020-01-28T15:35:17Z")

</div>

logstash is multi-threaded, so a single logstash instance should be able to consume all the resources of a single server. You can certainly distribute your logs across multiple servers to consume them faster.

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [January 28, 2020, 9:01pm UTC](https://discuss.elastic.co/t/multiple-logstash-to-a-single-elasticsearch/216764/3 "2020-01-28T21:01:50Z")

</div>

How have you determined that it is Logstash that is the bottleneck and not Elasticsearch?

---

<div class="post-metadata">

### Author: ![Prajwal\_Bhusari](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/prajwal_bhusari/32/61515_2.png) [@Prajwal\_Bhusari](https://discuss.elastic.co/u/Prajwal_Bhusari)
#### Post date: [January 29, 2020, 5:08am UTC](https://discuss.elastic.co/t/multiple-logstash-to-a-single-elasticsearch/216764/4 "2020-01-29T05:08:50Z")

</div>

Yes.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [February 26, 2020, 5:08am UTC](https://discuss.elastic.co/t/multiple-logstash-to-a-single-elasticsearch/216764/5 "2020-02-26T05:08:57Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.