Starting in version 7.16, this experimental functionality has been removed. You should use the journald input in Filebeat instead.
This functionality is in beta and is subject to change. The design and code is less mature than official GA features and is being provided as-is with no warranties. Beta features are not subject to the support SLA of official GA features.
rate_limit processor limits the throughput of events based on
the specified configuration.
In the current implementation, rate-limited events are dropped. Future implementations may allow rate-limited events to be handled differently.
processors: - rate_limit: limit: "10000/m"
processors: - rate_limit: fields: - "cloudfoundry.org.name" limit: "400/s"
processors: - if.equals.cloudfoundry.org.name: "acme" then: - rate_limit: limit: "500/s"
The following settings are supported:
The rate limit. Supported time units for the rate are
m(per minute), and
- (Optional) List of fields. The rate limit will be applied to each distinct value derived by combining the values of these fields.
Intro to Kibana
ELK for Logs & Metrics