I have an environment that has pretty high Windows EPS and am looking at best how to alleviate bottlenecks in processing Windows Event Logs. Overall, I'm getting around 100k EPS Windows events sustained on average, with spikes of up to 300k EPS, and I have the events getting collected to ~25 WEF Col…

Multiple Winlogbeat Agents on WEF Collectors

Kim-Kruse-Hansen (Kim Kruse Hansen) August 18, 2020, 4:44pm 2

What is the architecture? Winlogbeat directly to cluster or? How busy is the winlogbeat instance?
/Kim

Topic		Replies	Views
Need help tuning 3K+ EPS with ForwardedEvents Beats winlogbeat	13	4103	August 22, 2017
Winlogbeat performance issue Beats winlogbeat	1	288	May 5, 2022
Winlogbeat Throughput Seems Low Beats winlogbeat	3	1252	September 7, 2018
Trying to get some more throughput from Winlogbeat Beats winlogbeat	2	576	February 5, 2018
Run two winlogbeat instances on the same machine Beats winlogbeat	4	2271	January 18, 2021

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Multiple Winlogbeat Agents on WEF Collectors

Related topics