Set logstash to only collect data every X seconds

Elastic Stack Logstash
1

is there an option for logstash to only collect to elasticsearch every X second

i indexing netflow do display network bandwith usage and getting the data every other second or every 5 seconds is enough for us to see if we are getting close to our bandwith limit.

also i hope it will reduce cpu and memory usage and storage.

currently the netflow data is being send directly from our firewall to the logstash machine.

2

Not directly, you'd need to look at the aggregate filter, or something like that.

3

You can use sleep filter https://www.elastic.co/guide/en/logstash/current/plugins-filters-sleep.html

1 Like