This documentation contains work-in-progress information for future Elastic Stack and Cloud releases. Use the version selector to view supported release docs. It also contains some Elastic Cloud serverless information. Check out our serverless docs for more details.
Rate limit the flow of events
editRate limit the flow of events
editThe rate_limit
processor limits the throughput of events based on
the specified configuration.
In the current implementation, rate-limited events are dropped. Future implementations may allow rate-limited events to be handled differently.
processors: - rate_limit: limit: "10000/m"
processors: - rate_limit: fields: - "cloudfoundry.org.name" limit: "400/s"
processors: - if.equals.cloudfoundry.org.name: "acme" then: - rate_limit: limit: "500/s"
The following settings are supported:
-
limit
-
The rate limit. Supported time units for the rate are
s
(per second),m
(per minute), andh
(per hour). -
fields
- (Optional) List of fields. The rate limit will be applied to each distinct value derived by combining the values of these fields.