Logstash pipeline.workers count mismatch causing out‑of‑order event processing in production
0 reputation · 07 Jun 2024, 15:30 UTC
A Logstash pipeline that uses the default single worker (pipeline.workers = 1) processes events in the order they are received.
Production environments often set pipeline.workers to a value greater than 1, which can cause events to be processed out of sequence unless pipeline.ordered is explicitly enabled, and doing so may affect throughput.
Which worker count and pipeline.ordered configuration ensures ordered event delivery without excessive overhead? Does this requirement differ between Logstash 7.x and 8.x?