Revision history [back]

I'm trying to understand the reason why Logstash (or Elasticsearch, I haven't figured it out yet) is losing some logs under load. I can't see about 15% of logs in Kibana. Logstash is in a container on a host that is on the same subnet as the host on which the Elasticsearch container is deployed. I dump from the host running the Logstash container and see something strange. A lot of retransmits and Dup ACK packets from the container to the host with elasticsearch. What could be the cause of this behavior?

Performance Testing Host -> NGINX -> Service -> Logstach -> Elasticsearch

I'm trying to understand the reason why Logstash (or Elasticsearch, I haven't figured it out yet) is losing some logs under load. load (In moment when performance test of our service is proceeding). I can't see about 15% of logs in Kibana. Logstash is in a container on a host that is on the same subnet as the host on which the Elasticsearch container is deployed. I dump from the host running the Logstash container and see something strange. A lot of retransmits and Dup ACK packets from the container to the host with elasticsearch. What could be the cause of this behavior?

Performance Testing Host -> NGINX -> Service -> Logstach -> Elasticsearch

I'm trying to understand the reason why Logstash (or Elasticsearch, I haven't figured it out yet) is losing some logs under load (In moment when performance test of our service is proceeding). I can't see about 15% of logs in Kibana. Logstash is in a container on a host that is on the same subnet as the host on which the Elasticsearch container is deployed. I dump from the host running the Logstash container and see something strange. A lot of retransmits and Dup ACK packets from the container to the host with elasticsearch. What could be the cause of this behavior?