Throttling guidance

We are using graylog to collect logs from kubernetes microservices. We use fluentbit to forward the logs.
Occasionally one microservice will misbehave and send millions of logs.
Does anyone have any suggestions on dealing with this?
I’d like to throttle on a per-microservice (i.e. per kubernetes container) basis.
Fluentbit has throttle filter, but it would throttle everything coming from a kubenetes node.
Any other suggestions?

Graylog support throttling for some Inputs, check docs:

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.