From 977c2b9c58948b6b260c1a00b591d53f1f79c22f Mon Sep 17 00:00:00 2001 From: Kevin Carter Date: Thu, 14 Jun 2018 23:31:15 -0500 Subject: [PATCH] Disable sniffing for elasticsearch output The sniffing and template generation process will be enabled or disabled when run along side data/ingest nodes. This will cut down on network IO as the logstash output will use localhost to communicate to elasticsearch whenever possible. Change-Id: Ic289a2b8005cc76570420d74a2b46e2f1eccafbd Signed-off-by: Kevin Carter --- elk_metrics_6x/templates/99-elasticsearch-output.conf.j2 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/elk_metrics_6x/templates/99-elasticsearch-output.conf.j2 b/elk_metrics_6x/templates/99-elasticsearch-output.conf.j2 index 7b7fa8cb..139cdc87 100644 --- a/elk_metrics_6x/templates/99-elasticsearch-output.conf.j2 +++ b/elk_metrics_6x/templates/99-elasticsearch-output.conf.j2 @@ -1,8 +1,8 @@ output { elasticsearch { hosts => {{ elasticsearch_data_hosts | shuffle(seed=inventory_hostname) | to_json }} - sniffing => true - manage_template => false + sniffing => {{ (not data_node | bool) | lower }} + manage_template => {{ (not data_node | bool) | lower }} index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}" } }