logstash-codec-cef icon indicating copy to clipboard operation
logstash-codec-cef copied to clipboard

CEF Codec Slow and can't handle > 3kEPS

Open mlhk2007 opened this issue 5 years ago • 2 comments

Please post all product and debugging questions on our forum. Your questions will reach our wider community members there, and if we confirm that there is a bug, then we can open a new issue here.

For all general issues, please provide the following details for fast resolution:

  • Version: 7.3.1
  • Operating System: Centos 7.6
  • Config File (if you have sensitive info, please remove it): input{ tcp{ port => 5144 codec => cef{ delimiter =>"\r\n"} } }
  • Sample Data: CEF Data
  • Steps to Reproduce:

mlhk2007 avatar Sep 19 '19 03:09 mlhk2007

I've been able to get to 15K eps without too much of an issue.

gwsales avatar Nov 27 '19 18:11 gwsales

This is very impacting and would appreciate getting this issue prioritized.

TheSecMaven avatar Feb 19 '20 22:02 TheSecMaven