{"action":"created","issue":{"url":"https://api.github.com/repos/elastic/beats/issues/6511","repository_url":"https://api.github.com/repos/elastic/beats","labels_url":"https://api.github.com/repos/elastic/beats/issues/6511/labels{/name}","comments_url":"https://api.github.com/repos/elastic/beats/issues/6511/comments","events_url":"https://api.github.com/repos/elastic/beats/issues/6511/events","html_url":"https://github.com/elastic/beats/issues/6511","id":303494889,"number":6511,"title":"Big CPU load for filebeat on Windows server","user":{"login":"jmreymond","id":8809413,"avatar_url":"https://avatars3.githubusercontent.com/u/8809413?v=4","gravatar_id":"","url":"https://api.github.com/users/jmreymond","html_url":"https://github.com/jmreymond","followers_url":"https://api.github.com/users/jmreymond/followers","following_url":"https://api.github.com/users/jmreymond/following{/other_user}","gists_url":"https://api.github.com/users/jmreymond/gists{/gist_id}","starred_url":"https://api.github.com/users/jmreymond/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jmreymond/subscriptions","organizations_url":"https://api.github.com/users/jmreymond/orgs","repos_url":"https://api.github.com/users/jmreymond/repos","events_url":"https://api.github.com/users/jmreymond/events{/privacy}","received_events_url":"https://api.github.com/users/jmreymond/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-03-08T14:18:19Z","updated_at":"2018-03-09T08:06:04Z","closed_at":"2018-03-09T08:06:04Z","author_association":"NONE","body":"We have filebeat 5.5.2 running on Linxux serverRed hat 7.2,  readling log files and exporting to kafka server and load is very low: that's nice :-)\r\nBut now, we have to collect logs from windows server 2012 with filebeat 5.5.2 and unfortunatly, load is very high, eating 30% of CPU. Configuration is basic as for linux servers but we cannot accept that 30% CPU eaten by filebeat process. With another Windows server (WS 2008), same behavior :-( \r\nHow can we optimize this process to have acceptable performances ? \r\nThanks for your tips,"},"comment":{"url":"https://api.github.com/repos/elastic/beats/issues/comments/371741888","html_url":"https://github.com/elastic/beats/issues/6511#issuecomment-371741888","issue_url":"https://api.github.com/repos/elastic/beats/issues/6511","id":371741888,"user":{"login":"jmreymond","id":8809413,"avatar_url":"https://avatars3.githubusercontent.com/u/8809413?v=4","gravatar_id":"","url":"https://api.github.com/users/jmreymond","html_url":"https://github.com/jmreymond","followers_url":"https://api.github.com/users/jmreymond/followers","following_url":"https://api.github.com/users/jmreymond/following{/other_user}","gists_url":"https://api.github.com/users/jmreymond/gists{/gist_id}","starred_url":"https://api.github.com/users/jmreymond/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jmreymond/subscriptions","organizations_url":"https://api.github.com/users/jmreymond/orgs","repos_url":"https://api.github.com/users/jmreymond/repos","events_url":"https://api.github.com/users/jmreymond/events{/privacy}","received_events_url":"https://api.github.com/users/jmreymond/received_events","type":"User","site_admin":false},"created_at":"2018-03-09T08:06:04Z","updated_at":"2018-03-09T08:06:04Z","author_association":"NONE","body":"The repository of logs has 18000 entries and scan of the 18000 entries eats the CPU every10 seconds (scan frequency)"}}
{"actor":{"display_login":"jmreymond"}}