Logstash Performance Degradation Memory Leak
I have a couple of windows server data collectors which slowly over time suffer an ingestion degradation as shown above. Restarting logstash on the server would bring ingrestion rates back…
SIEM Log Ingestion – To filter or to deduplicate
Why Should You Manage Your Log Ingestion? Cost Implications SIEM tools operate under a licensing model that typically charges based on the volume of logs ingested. Ingesting a high volume…
Filebeat write: failed to publish events / connection reset by peer
I was using filebeat to listen on port 514 to accept rsyslog messages from AIX servers with the aim of filebeat then having an output to my logstash instance on…