Examples of file analytics systems are described that may obtain event data from a virtualized file server. The event data may be aggregated and/or filtered to provide metrics. The file analytics system may obtain event data from the virtualized file server. The file analytics system may process multiple streams of event data in parallel by separating messages corresponding to the event data message topic into multiple partition pipelines. To avoid processing events related to a particular file out of chronological order, the analytics tool may distribute events for the particular file to the same message topic partition pipeline.