- Metricbeat Reference: other versions:
- Overview
- Getting started with Metricbeat
- Setting up and running Metricbeat
- Upgrading Metricbeat
- How Metricbeat works
- Configuring Metricbeat
- Specify which modules to run
- Specify general settings
- Load external configuration files
- Configure the internal queue
- Configure the output
- Specify SSL settings
- Filter and enhance the exported data
- Parse data by using ingest node
- Set up project paths
- Set up the Kibana endpoint
- Load the Kibana dashboards
- Load the Elasticsearch index template
- Configure logging
- Use environment variables in the configuration
- Autodiscover
- YAML tips and gotchas
- Regular expression support
- HTTP Endpoint
- metricbeat.reference.yml
- Beats central management
- Modules
- Aerospike module
- Apache module
- Ceph module
- Couchbase module
- Docker module
- Dropwizard module
- Elasticsearch module
- Elasticsearch ccr metricset
- Elasticsearch cluster_stats metricset
- Elasticsearch index metricset
- Elasticsearch index_recovery metricset
- Elasticsearch index_summary metricset
- Elasticsearch ml_job metricset
- elasticsearch ml_job MetricSet
- Elasticsearch node metricset
- Elasticsearch node_stats metricset
- Elasticsearch pending_tasks metricset
- elasticsearch pending_tasks MetricSet
- Elasticsearch shard metricset
- envoyproxy module
- Etcd module
- Golang module
- Graphite module
- HAProxy module
- HTTP module
- Jolokia module
- Kafka module
- Kibana module
- Kubernetes module
- Kubernetes apiserver metricset
- Kubernetes container metricset
- Kubernetes event metricset
- Kubernetes node metricset
- Kubernetes pod metricset
- Kubernetes state_container metricset
- Kubernetes state_deployment metricset
- Kubernetes state_node metricset
- Kubernetes state_pod metricset
- Kubernetes state_replicaset metricset
- Kubernetes state_statefulset metricset
- Kubernetes system metricset
- Kubernetes volume metricset
- kvm module
- Logstash module
- Memcached module
- MongoDB module
- Munin module
- MySQL module
- Nginx module
- PHP_FPM module
- PostgreSQL module
- Prometheus module
- RabbitMQ module
- Redis module
- System module
- System core metricset
- System cpu metricset
- System diskio metricset
- System filesystem metricset
- System fsstat metricset
- System load metricset
- System memory metricset
- System network metricset
- System process metricset
- System process_summary metricset
- System raid metricset
- System socket metricset
- System socket_summary metricset
- System uptime metricset
- traefik module
- uwsgi module
- vSphere module
- Windows module
- ZooKeeper module
- Exported fields
- Aerospike fields
- Apache fields
- Beat fields
- Ceph fields
- Cloud provider metadata fields
- Common fields
- Couchbase fields
- Docker fields
- Docker fields
- Dropwizard fields
- Elasticsearch fields
- envoyproxy fields
- Etcd fields
- Golang fields
- Graphite fields
- HAProxy fields
- Host fields
- HTTP fields
- Jolokia fields
- Kafka fields
- Kibana fields
- Kubernetes fields
- Kubernetes fields
- kvm fields
- Logstash fields
- Memcached fields
- MongoDB fields
- Munin fields
- MySQL fields
- Nginx fields
- PHP_FPM fields
- PostgreSQL fields
- Prometheus fields
- RabbitMQ fields
- Redis fields
- System fields
- traefik fields
- uwsgi fields
- vSphere fields
- Windows fields
- ZooKeeper fields
- Monitoring Metricbeat
- Securing Metricbeat
- Troubleshooting
- Contributing to Beats
Elasticsearch fields
editElasticsearch fields
editElasticsearch module
elasticsearch fields
edit-
elasticsearch.cluster.name
-
type: keyword
Elasticsearch cluster name.
-
elasticsearch.cluster.id
-
type: keyword
Elasticsearch cluster id.
-
elasticsearch.cluster.state.id
-
type: keyword
Elasticsearch state id.
ccr fields
editCross-cluster replication stats
-
elasticsearch.ccr.leader.index
-
type: keyword
Name of leader index
-
elasticsearch.ccr.leader.max_seq_no
-
type: long
Maximum sequence number of operation on the leader shard
-
elasticsearch.ccr.follower.index
-
type: keyword
Name of follower index
-
elasticsearch.ccr.follower.shard.number
-
type: long
Number of the shard within the index
-
elasticsearch.ccr.follower.operations_indexed
-
type: long
Number of operations indexed (replicated) into the follower shard from the leader shard
-
elasticsearch.ccr.follower.time_since_last_fetch.ms
-
type: long
Time, in ms, since the follower last fetched from the leader
-
elasticsearch.ccr.follower.global_checkpoint
-
type: long
Global checkpoint value on follower shard
cluster.stats fields
editCluster stats
-
elasticsearch.cluster.stats.status
-
type: keyword
Cluster status (green, yellow, red).
nodes fields
editNodes statistics.
-
elasticsearch.cluster.stats.nodes.count
-
type: long
Total number of nodes in cluster.
-
elasticsearch.cluster.stats.nodes.master
-
type: long
Number of master-eligible nodes in cluster.
-
elasticsearch.cluster.stats.nodes.data
-
type: long
Number of data nodes in cluster.
indices fields
editIndices statistics.
-
elasticsearch.cluster.stats.indices.count
-
type: long
Total number of indices in cluster.
shards fields
editShard statistics.
-
elasticsearch.cluster.stats.indices.shards.count
-
type: long
Total number of shards in cluster.
-
elasticsearch.cluster.stats.indices.shards.primaries
-
type: long
Total number of primary shards in cluster.
-
elasticsearch.cluster.stats.indices.fielddata.memory.bytes
-
type: long
Memory used for fielddata.
index fields
editindex
-
elasticsearch.index.name
-
type: keyword
Index name.
-
elasticsearch.index.total.docs.count
-
type: long
Total number of documents in the index.
-
elasticsearch.index.total.docs.deleted
-
type: long
Total number of deleted documents in the index.
-
elasticsearch.index.total.store.size.bytes
-
type: long
format: bytes
Total size of the index in bytes.
-
elasticsearch.index.total.segments.count
-
type: long
Total number of index segments.
-
elasticsearch.index.total.segments.memory.bytes
-
type: long
format: bytes
Total number of memory used by the segments in bytes.
index.recovery fields
editindex
-
elasticsearch.index.recovery.id
-
type: long
Shard recovery id.
-
elasticsearch.index.recovery.type
-
type: keyword
Shard recovery type.
-
elasticsearch.index.recovery.primary
-
type: boolean
True if primary shard.
-
elasticsearch.index.recovery.stage
-
type: keyword
Recovery stage.
-
elasticsearch.index.recovery.target.id
-
type: keyword
Target node id.
-
elasticsearch.index.recovery.target.host
-
type: ip
Target node host address.
-
elasticsearch.index.recovery.target.name
-
type: keyword
Target node name.
-
elasticsearch.index.recovery.source.id
-
type: keyword
Source node id.
-
elasticsearch.index.recovery.source.host
-
type: ip
Source node host address.
-
elasticsearch.index.recovery.source.name
-
type: keyword
Source node name.
index.summary fields
editindex
-
elasticsearch.index.summary.primaries.docs.count
-
type: long
Total number of documents in the index.
-
elasticsearch.index.summary.primaries.docs.deleted
-
type: long
Total number of deleted documents in the index.
-
elasticsearch.index.summary.primaries.store.size.bytes
-
type: long
format: bytes
Total size of the index in bytes.
-
elasticsearch.index.summary.primaries.segments.count
-
type: long
Total number of index segments.
-
elasticsearch.index.summary.primaries.segments.memory.bytes
-
type: long
format: bytes
Total number of memory used by the segments in bytes.
-
elasticsearch.index.summary.total.docs.count
-
type: long
Total number of documents in the index.
-
elasticsearch.index.summary.total.docs.deleted
-
type: long
Total number of deleted documents in the index.
-
elasticsearch.index.summary.total.store.size.bytes
-
type: long
format: bytes
Total size of the index in bytes.
-
elasticsearch.index.summary.total.segments.count
-
type: long
Total number of index segments.
-
elasticsearch.index.summary.total.segments.memory.bytes
-
type: long
format: bytes
Total number of memory used by the segments in bytes.
ml.job fields
editml
-
elasticsearch.ml.job.id
-
type: keyword
Unique ml job id.
-
elasticsearch.ml.job.state
-
type: keyword
Job state.
-
elasticsearch.ml.job.data_counts.processed_record_count
-
type: long
Processed data events.
-
elasticsearch.ml.job.data_counts.invalid_date_count
-
type: long
The number of records with either a missing date field or a date that could not be parsed.
node fields
editnode
-
elasticsearch.node.name
-
type: keyword
Node name.
-
elasticsearch.node.version
-
type: keyword
Node version.
jvm fields
editJVM Info.
-
elasticsearch.node.jvm.version
-
type: keyword
JVM version.
-
elasticsearch.node.jvm.memory.heap.init.bytes
-
type: long
format: bytes
Heap init used by the JVM in bytes.
-
elasticsearch.node.jvm.memory.heap.max.bytes
-
type: long
format: bytes
Heap max used by the JVM in bytes.
-
elasticsearch.node.jvm.memory.nonheap.init.bytes
-
type: long
format: bytes
Non-Heap init used by the JVM in bytes.
-
elasticsearch.node.jvm.memory.nonheap.max.bytes
-
type: long
format: bytes
Non-Heap max used by the JVM in bytes.
-
elasticsearch.node.process.mlockall
-
type: boolean
If process locked in memory.
node.stats fields
editnode_stats
indices fields
editNode indices stats
-
elasticsearch.node.stats.indices.docs.count
-
type: long
Total number of existing documents.
-
elasticsearch.node.stats.indices.docs.deleted
-
type: long
Total number of deleted documents.
-
elasticsearch.node.stats.indices.segments.count
-
type: long
Total number of segments.
-
elasticsearch.node.stats.indices.segments.memory.bytes
-
type: long
format: bytes
Total size of segments in bytes.
-
elasticsearch.node.stats.indices.store.size.bytes
-
type: long
Total size of the store in bytes.
jvm.mem.pools fields
editJVM memory pool stats
old fields
editOld memory pool stats.
-
elasticsearch.node.stats.jvm.mem.pools.old.max.bytes
-
type: long
format: bytes
Max bytes.
-
elasticsearch.node.stats.jvm.mem.pools.old.peak.bytes
-
type: long
format: bytes
Peak bytes.
-
elasticsearch.node.stats.jvm.mem.pools.old.peak_max.bytes
-
type: long
format: bytes
Peak max bytes.
-
elasticsearch.node.stats.jvm.mem.pools.old.used.bytes
-
type: long
format: bytes
Used bytes.
young fields
editYoung memory pool stats.
-
elasticsearch.node.stats.jvm.mem.pools.young.max.bytes
-
type: long
format: bytes
Max bytes.
-
elasticsearch.node.stats.jvm.mem.pools.young.peak.bytes
-
type: long
format: bytes
Peak bytes.
-
elasticsearch.node.stats.jvm.mem.pools.young.peak_max.bytes
-
type: long
format: bytes
Peak max bytes.
-
elasticsearch.node.stats.jvm.mem.pools.young.used.bytes
-
type: long
format: bytes
Used bytes.
survivor fields
editSurvivor memory pool stats.
-
elasticsearch.node.stats.jvm.mem.pools.survivor.max.bytes
-
type: long
format: bytes
Max bytes.
-
elasticsearch.node.stats.jvm.mem.pools.survivor.peak.bytes
-
type: long
format: bytes
Peak bytes.
-
elasticsearch.node.stats.jvm.mem.pools.survivor.peak_max.bytes
-
type: long
format: bytes
Peak max bytes.
-
elasticsearch.node.stats.jvm.mem.pools.survivor.used.bytes
-
type: long
format: bytes
Used bytes.
jvm.gc.collectors fields
editGC collector stats.
old.collection fields
editOld collection gc.
-
elasticsearch.node.stats.jvm.gc.collectors.old.collection.count
-
type: long
-
elasticsearch.node.stats.jvm.gc.collectors.old.collection.ms
-
type: long
young.collection fields
editYoung collection gc.
-
elasticsearch.node.stats.jvm.gc.collectors.young.collection.count
-
type: long
-
elasticsearch.node.stats.jvm.gc.collectors.young.collection.ms
-
type: long
fs.summary fields
editFile system summary
-
elasticsearch.node.stats.fs.summary.total.bytes
-
type: long
format: bytes
-
elasticsearch.node.stats.fs.summary.free.bytes
-
type: long
format: bytes
-
elasticsearch.node.stats.fs.summary.available.bytes
-
type: long
format: bytes
cluster.pending_task fields
editcluster.pending_task
contains a pending task description.
-
elasticsearch.cluster.pending_task.insert_order
-
type: long
Insert order
-
elasticsearch.cluster.pending_task.priority
-
type: long
Priority
-
elasticsearch.cluster.pending_task.source
-
type: keyword
Source. For example: put-mapping
-
elasticsearch.cluster.pending_task.time_in_queue.ms
-
type: long
Time in queue
shard fields
editshard fields
-
elasticsearch.shard.primary
-
type: boolean
True if this is the primary shard.
-
elasticsearch.shard.number
-
type: long
The number of this shard.
-
elasticsearch.shard.state
-
type: keyword
The state of this shard.
-
elasticsearch.shard.relocating_node.name
-
type: keyword
The node the shard was relocated from.
On this page
- elasticsearch fields
- ccr fields
- cluster.stats fields
- nodes fields
- indices fields
- shards fields
- index fields
- index.recovery fields
- index.summary fields
- ml.job fields
- node fields
- jvm fields
- node.stats fields
- indices fields
- jvm.mem.pools fields
- old fields
- young fields
- survivor fields
- jvm.gc.collectors fields
- old.collection fields
- young.collection fields
- fs.summary fields
- cluster.pending_task fields
- shard fields