Troubleshoot logstash. Find dropped events by logs

Resently i noticed, that i doesn't get some Windows logs. I use WEF collector - Winlogbeat - Logstash - Elasticsearch.
I checked WEF, messages were on it and it was ok, than i check winlogbeat logs - there is no errors or something strange. I even use debug mode.
After it i check Logstash - i look for /var/log/logstash/logstash* logs and doesn't find any problems. I look for healthcheck in Kibana: CPU were near 10% and Heap near 9 Gb from 30Gb for JAVA.
Than i disable other logs, except winlogbeat. Before this action i has near 80 EPS for (winlogbeat-wef) pipe, after i have 3500 EPS! So, a lot of events simply dropped, as i understand and i coudnt find any logs about it.
Here you can see overal EPS for Logstash

It increases from 1000 to 4000 EPS.
So, my questions are:

  1. how to determine that something goes wrong with Logstash?Is there is some secret logs?
  2. How can i know about queues?
  3. How can i ckeck the health of every pipe?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.