Set logstash to only collect data every X seconds

is there an option for logstash to only collect to elasticsearch every X second

i indexing netflow do display network bandwith usage and getting the data every other second or every 5 seconds is enough for us to see if we are getting close to our bandwith limit.

also i hope it will reduce cpu and memory usage and storage.

currently the netflow data is being send directly from our firewall to the logstash machine.

Not directly, you'd need to look at the aggregate filter, or something like that.

You can use sleep filter

1 Like