Trying to get some more throughput from Winlogbeat

Elastic Stack Beats
1

Hey all:

I've recently installed Winlogbeat [5.6] to a server and am trying to increase throughput. It seems that I'm unable to get it to send >300 events per second (as evidenced by my ELK monitoring cluster looking at the indexing rate).

Any unique configurations I can look into to enable better throughput?

I've verified resource availability on both the Logstash & Host Server side.

Thanks,

John

2

The first thing I recommend is trying the latest Winlogbeat 6.1 release.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.