# Vertical Scalability of Logstash in AWS - ECS

**URL:** <https://discuss.elastic.co/t/vertical-scalability-of-logstash-in-aws-ecs/120935>\
**Category:** Logstash\
**Created:** [February 21, 2018, 9:14pm UTC](https://discuss.elastic.co/t/vertical-scalability-of-logstash-in-aws-ecs/120935 "2018-02-21T21:14:35Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jay1](https://avatars.discourse-cdn.com/v4/letter/j/9d8465/32.png) [@Jay1](https://discuss.elastic.co/u/Jay1)\
**Post date:** [February 21, 2018, 9:14pm UTC](https://discuss.elastic.co/t/vertical-scalability-of-logstash-in-aws-ecs/120935/1 "2018-02-21T21:14:35Z")

</div>

Hi Everyone ,

I am trying to implement ELK stack on AWS environment and planning to run logstash as Docker Container on ECS .

The incoming traffic to logstash are from Filebeat installed on around 20+ App servers and I believe the communication from Filebeat to logstash is over TCP .

In that case , we are forced to use Amazon's Network load balancer ( over an App Load Balancer) which results in the mapping of Logstash container port to host Port ( 5044) . This prevents a vertical scalable logstash container and limits to One container per host .

Is there a way to scale up vertically in ECS - Running more logstash containers with network load balancer ?

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [February 22, 2018, 7:06am UTC](https://discuss.elastic.co/t/vertical-scalability-of-logstash-in-aws-ecs/120935/2 "2018-02-22T07:06:06Z")

</div>

This isn't really a Logstash question.

You could have a local load balancer on each machine that dispatches connections to the backing containers.

Isn't the AWS load balancer able to field incoming connections to different ports on the same destination host?

Why do you need to run a large machine with multiple Logstash containers in the first place?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 22, 2018, 7:06am UTC](https://discuss.elastic.co/t/vertical-scalability-of-logstash-in-aws-ecs/120935/3 "2018-03-22T07:06:12Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.