Netflow Codec tuning

Elastic Stack Logstash
1

Hi there,

I'm referring to the Netflow codec documentation and stuff on github and I have a question about the Usage examples.

I'm assuming that the number of workers is expected to correlate 1:1 with the number of CPUs intended to be dedicated to logstash, but I'm confused about receive_buffer_bytes and rmem_max

rmem_max seems to be relative to the number of CPUs(?). Is receive_buffer_bytes always expected to be 16777216 if one feels the need to configure it, or should it match whatever value is calculated for rmem_max?

Thanks!

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.