# Netflow Codec tuning

**URL:** <https://discuss.elastic.co/t/netflow-codec-tuning/129475>\
**Category:** Logstash\
**Created:** [April 25, 2018, 11:55am UTC](https://discuss.elastic.co/t/netflow-codec-tuning/129475 "2018-04-25T11:55:03Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![jlixfeld](https://avatars.discourse-cdn.com/v4/letter/j/9fc348/32.png) [@jlixfeld](https://discuss.elastic.co/u/jlixfeld)\
**Post date:** [April 25, 2018, 11:55am UTC](https://discuss.elastic.co/t/netflow-codec-tuning/129475/1 "2018-04-25T11:55:03Z")

</div>

Hi there,

I'm referring to the [Netflow codec documentation](https://www.elastic.co/guide/en/logstash/current/plugins-codecs-netflow.html) and stuff on [github](https://github.com/logstash-plugins/logstash-codec-netflow/issues/85) and I have a question about the Usage examples.

I'm assuming that the number of workers is expected to correlate 1:1 with the number of CPUs intended to be dedicated to logstash, but I'm confused about `receive_buffer_bytes` and `rmem_max`

`rmem_max` seems to be relative to the number of CPUs(?). Is `receive_buffer_bytes` always expected to be `16777216` if one feels the need to configure it, or should it match whatever value is calculated for `rmem_max`?

Thanks!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 23, 2018, 11:55am UTC](https://discuss.elastic.co/t/netflow-codec-tuning/129475/2 "2018-05-23T11:55:06Z")

</div>

Closed on May 23, 2018, 11:55am UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.