# Performance of logstash degrading

**URL:** <https://discuss.elastic.co/t/performance-of-logstash-degrading/238229>\
**Category:** Logstash\
**Created:** [June 23, 2020, 10:49am UTC](https://discuss.elastic.co/t/performance-of-logstash-degrading/238229 "2020-06-23T10:49:33Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![juliolb](https://avatars.discourse-cdn.com/v4/letter/j/71c47a/32.png) [@juliolb](https://discuss.elastic.co/u/juliolb)\
**Post date:** [June 23, 2020, 10:49am UTC](https://discuss.elastic.co/t/performance-of-logstash-degrading/238229/1 "2020-06-23T10:49:33Z")

</div>

Hello,  
I have been using logstash for some time now and I recently upgraded from an old version (5.3.2) to a newer one (6.2.4). Using basically the same parameters I noticed a dramatic decrease in the rate of processed records. I decided to make some tests on a machine using as input a file and writing also to another file on disk. Changing parameters and memory only meant variations of few records/s but the logstash version really made a difference.  
logstash 5.3.2: ~85/s  
logstash 6.2.4: ~30/s  
logstash 7.7.0: ~15/s  
My application involves the recollection of pieces of information scattered among various log lines and thus I'm using the logstash-filter-aggregate plugin with a single output pipeline. And, just in case that it also matters, I'm also accessing an sqlite3 DB to append some information obtained from other sources (ruby code within the filter).  
Please, could you comment on this and tell me whether this might be expected ? Thanks very much for any helpful advice.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 21, 2020, 10:49am UTC](https://discuss.elastic.co/t/performance-of-logstash-degrading/238229/2 "2020-07-21T10:49:35Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
