I have sent many messages to one input.
Messages are now in the buffer and their number is more than 8 million.
How can I handle these messages?
Did you delete any Stream or Index? Seems that the message cannot be send to the correct place. Need to check “Server logs” and “Elastic log” 
Mind the bug in the “Jornal Utilization” 100,41%??
Yes. Problem was in slow processing regex. I am deleted input and all his configurations. Then performance increased to 10k mes/sec.
At now i have this problem too. It occurs when pipeline can’t parse message with grok patterns.
If you deleted de input, you must reconfigure the Sidecar or host clients for stop sending to that “input” / port
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.