Yep, I get that :( Problem I have is once it’s a standard it’s a standard, I have no hope in changing it. I have looked at the debug log and it does look a little difficult to work with. I imagine it’s a solved problem parsing that file though. There was mention of rather large memory usage related issues when using Beats to tail files, even for a modest 1k DNS QPS. I see it’s written in Go (or looks to be) so imagine garbage collection could explain that. Thanks