-
Notifications
You must be signed in to change notification settings - Fork 562
Remove max_number_of_messages for SQS+S3-based inputs #12101
Copy link
Copy link
Closed
Labels
Integration:amazon_security_lakeAmazon Security LakeAmazon Security LakeIntegration:awsAWSAWSIntegration:canvaCanvaCanvaIntegration:carbon_black_cloudVMware Carbon Black CloudVMware Carbon Black CloudIntegration:cloudflare_logpushCloudflare LogpushCloudflare LogpushIntegration:f5_bigipF5 BIG-IPF5 BIG-IPIntegration:imperva_cloud_wafImperva Cloud WAFImperva Cloud WAFIntegration:jamf_protectJamf Protect (Partner supported)Jamf Protect (Partner supported)Integration:sentinel_one_cloud_funnelSentinelOne Cloud FunnelSentinelOne Cloud FunnelIntegration:servicenowServiceNowServiceNowIntegration:sublime_securitySublime SecuritySublime SecurityIntegration:symantec_endpoint_securitySymantec Endpoint SecuritySymantec Endpoint SecurityIntegration:taniumTaniumTaniumIntegration:trellix_edr_cloudTrellix EDR CloudTrellix EDR Cloud
Metadata
Metadata
Assignees
Labels
Integration:amazon_security_lakeAmazon Security LakeAmazon Security LakeIntegration:awsAWSAWSIntegration:canvaCanvaCanvaIntegration:carbon_black_cloudVMware Carbon Black CloudVMware Carbon Black CloudIntegration:cloudflare_logpushCloudflare LogpushCloudflare LogpushIntegration:f5_bigipF5 BIG-IPF5 BIG-IPIntegration:imperva_cloud_wafImperva Cloud WAFImperva Cloud WAFIntegration:jamf_protectJamf Protect (Partner supported)Jamf Protect (Partner supported)Integration:sentinel_one_cloud_funnelSentinelOne Cloud FunnelSentinelOne Cloud FunnelIntegration:servicenowServiceNowServiceNowIntegration:sublime_securitySublime SecuritySublime SecurityIntegration:symantec_endpoint_securitySymantec Endpoint SecuritySymantec Endpoint SecurityIntegration:taniumTaniumTaniumIntegration:trellix_edr_cloudTrellix EDR CloudTrellix EDR Cloud
Type
Fields
Give feedbackNo fields configured for issues without a type.
With elastic/beats#40699 the max_number_of_messages setting is now ignored for SQS inputs as of 8.15. It is still exposed in integration settings. It is still relevant for <8.15.
The new setting is number_of_workers, which the SQS-based input shares with the S3 bucket polling input in integration settings.
Unfortunately, the default value for number_of_workers is just
1. Users using an SQS-based S3 input upgrading to 8.15 agents will find that they've gone from having five workers (or whatever number they had customized it to) for processing objects to just a single worker processing objects.We should consider one or more of the following:
max_number_of_messagessetting for thenumber_of_workersvalue ifqueue_urlis present to maintain backwards compatibility while indicating that the setting will be removed in a future version.max_number_of_messagesis no longer applicable for 8.15 and to usenumber_of_workerswhen using an SQS queuenumber_of_workersdefault value to 5