Hi , I am new to ES Stack . I am trying to improve the performance of filebeat publishing events to logstash by monitioring tool. I find it disturbing when I saw the Graph of Event Rate :
Though I have read the notes at the right top corner , I am still confused about the metrics:
- Does Total should equal to ( Emitted + Acknowledged + Queued) ? Whats the meaning of the left amount(Total - Emitted - Acknowledged - Queued)?
- Should Total gets far more than Emitted?
- Is it normal for a filebeat instance that New is far more than Emitted?
I have read the document on Elastic site and searched on google but still fond no clear description. I would be much grateful for anyone who are full of patience to help me solve the problems above.