logging - Logstash indexer is scalable? -


i using logstash shipper -> redis -> logstash indexer -> elastricsearch -> kibana

i understand redis , elastricsearch designed scalable. how logstash indexer, see on logstash main site show example of using single logstash indexer.

would enough handle logs? , suggestion on having many instances of logstash indexer?

if indexer bottleneck of such setup, add second logstash indexer on second machine same configuration, change redis source host , elasticsearch target host. when read same redis instance, use blocking reads ensure 1 redis entry read 1 indexer.

as components, @ horizontal scaling (more machines), indexer can scaled onto bigger machine.

if processing of single log events takes long, may try prevent work on indexer. e.g. done doing work on shipper side (using logstash filters) or having applications write json logs instead of "plain" loglines.


Comments

Popular posts from this blog

python - Subclassed QStyledItemDelegate ignores Stylesheet -

java - HttpClient 3.1 Connection pooling vs HttpClient 4.3.2 -

SQL: Divide the sum of values in one table with the count of rows in another -