I’m having some LogStash Memory issues that sound a bit like Backport PR #13642 to 7.17: field-reference: cap RUBY_CACHE to 10k entries by yaauie · Pull Request #13655 · elastic/logstash · GitHub, which has been mitigated in LogStash 7.17.0, but the latest version of ECR Public Gallery is 7.16.3.