Very slow movement of data

[jagan (jagdish)]

Hi All,

Recently i had upgraded all(ELK) versions to 5.3.2.
Everything is working fine but today when I am trying to rebuild a new index it got terminated due to long running time.
So after that the data from Filebeat to Logstash and ElasticSearch is not moving or data movement is very very slow.

Registry file path is set in filebeat.

Please let me know your comments on why the data movement stopped or happenning very very slow.

Regards,
jagan

[jkuang (Jimmy Kuang)]

How to push two inputs data as a single event(docment) in logstash.ym

Hi...all How can i push two inputs data as a single event(docment) in logstash.yml for example input{ file{ type => "dummylog" path => [/var/log/messages] } file{ type => "log" path => [/var/log/kernel.logs] } } output { elasticsearch { host => localhost } stdout { } } } let /var/log/messages has 100 events and let /var/log/kernel.logs has 100 events and how can i push /var/log/messages first line and /var/log/kernel.logs first line as si…