- Metricbeat Reference: other versions:
- Metricbeat overview
- Quick start: installation and configuration
- Set up and run
- Upgrade Metricbeat
- How Metricbeat works
- Configure
- Modules
- General settings
- Project paths
- Config file loading
- Output
- Kerberos
- SSL
- Index lifecycle management (ILM)
- Elasticsearch index template
- Kibana endpoint
- Kibana dashboards
- Processors
- Define processors
- add_cloud_metadata
- add_cloudfoundry_metadata
- add_docker_metadata
- add_fields
- add_host_metadata
- add_id
- add_kubernetes_metadata
- add_labels
- add_locale
- add_observer_metadata
- add_process_metadata
- add_tags
- community_id
- convert
- copy_fields
- decode_base64_field
- decode_json_fields
- decompress_gzip_field
- dissect
- dns
- drop_event
- drop_fields
- extract_array
- fingerprint
- include_fields
- registered_domain
- rename
- script
- translate_sid
- truncate_fields
- urldecode
- Autodiscover
- Internal queue
- Logging
- HTTP endpoint
- Regular expression support
- Instrumentation
- metricbeat.reference.yml
- How to guides
- Beats central management
- Modules
- ActiveMQ module
- Aerospike module
- Apache module
- App Search module
- AWS module
- AWS billing metricset
- AWS cloudwatch metricset
- AWS dynamodb metricset
- AWS ebs metricset
- AWS ec2 metricset
- AWS elb metricset
- AWS lambda metricset
- AWS natgateway metricset
- AWS rds metricset
- AWS s3_daily_storage metricset
- AWS s3_request metricset
- AWS sns metricset
- AWS sqs metricset
- AWS transitgateway metricset
- AWS usage metricset
- AWS vpn metricset
- Azure module
- Azure app_insights metricset
- Azure app_state metricset
- Azure billing metricset
- Azure compute_vm metricset
- Azure compute_vm_scaleset metricset
- Azure container_instance metricset
- Azure container_registry metricset
- Azure container_service metricset
- Azure database_account metricset
- Azure monitor metricset
- Azure storage metricset
- Beat module
- Ceph module
- Ceph cluster_disk metricset
- Ceph cluster_health metricset
- Ceph cluster_status metricset
- Ceph mgr_cluster_disk metricset
- Ceph mgr_cluster_health metricset
- Ceph mgr_osd_perf metricset
- Ceph mgr_osd_pool_stats metricset
- Ceph mgr_osd_tree metricset
- Ceph mgr_pool_disk metricset
- Ceph monitor_health metricset
- Ceph osd_df metricset
- Ceph osd_tree metricset
- Ceph pool_disk metricset
- Cloudfoundry module
- CockroachDB module
- Consul module
- Coredns module
- Couchbase module
- CouchDB module
- Docker module
- Dropwizard module
- Elasticsearch module
- Elasticsearch ccr metricset
- Elasticsearch cluster_stats metricset
- Elasticsearch enrich metricset
- Elasticsearch index metricset
- Elasticsearch index_recovery metricset
- Elasticsearch index_summary metricset
- Elasticsearch ml_job metricset
- Elasticsearch node metricset
- Elasticsearch node_stats metricset
- Elasticsearch pending_tasks metricset
- Elasticsearch shard metricset
- Envoyproxy module
- Etcd module
- Golang module
- Google Cloud Platform module
- Graphite module
- HAProxy module
- HTTP module
- IBM MQ module
- IIS module
- Istio module
- Jolokia module
- Kafka module
- Kibana module
- Kubernetes module
- Kubernetes apiserver metricset
- Kubernetes container metricset
- Kubernetes controllermanager metricset
- Kubernetes event metricset
- Kubernetes node metricset
- Kubernetes pod metricset
- Kubernetes proxy metricset
- Kubernetes scheduler metricset
- Kubernetes state_container metricset
- Kubernetes state_cronjob metricset
- Kubernetes state_daemonset metricset
- Kubernetes state_deployment metricset
- Kubernetes state_node metricset
- Kubernetes state_persistentvolumeclaim metricset
- Kubernetes state_pod metricset
- Kubernetes state_replicaset metricset
- Kubernetes state_resourcequota metricset
- Kubernetes state_service metricset
- Kubernetes state_statefulset metricset
- Kubernetes state_storageclass metricset
- Kubernetes system metricset
- Kubernetes volume metricset
- KVM module
- linux module
- Logstash module
- Memcached module
- MongoDB module
- MSSQL module
- Munin module
- MySQL module
- NATS module
- Nginx module
- Openmetrics module
- Oracle module
- PHP_FPM module
- PostgreSQL module
- Prometheus module
- RabbitMQ module
- Redis module
- Redis Enterprise module
- SQL module
- Stan module
- Statsd module
- System module
- System core metricset
- System cpu metricset
- System diskio metricset
- System entropy metricset
- System filesystem metricset
- System fsstat metricset
- System load metricset
- System memory metricset
- System network metricset
- System network_summary metricset
- System process metricset
- System process_summary metricset
- System raid metricset
- System service metricset
- System socket metricset
- System socket_summary metricset
- System uptime metricset
- System users metricset
- Tomcat module
- Traefik module
- uWSGI module
- vSphere module
- Windows module
- ZooKeeper module
- Exported fields
- ActiveMQ fields
- Aerospike fields
- Apache fields
- App Search fields
- AWS fields
- Azure fields
- Beat fields
- Beat fields
- Ceph fields
- Cloud provider metadata fields
- Cloudfoundry fields
- CockroachDB fields
- Common fields
- Consul fields
- Coredns fields
- Couchbase fields
- CouchDB fields
- Docker fields
- Docker fields
- Dropwizard fields
- ECS fields
- Elasticsearch fields
- Envoyproxy fields
- Etcd fields
- Golang fields
- Google Cloud Platform fields
- Graphite fields
- HAProxy fields
- Host fields
- HTTP fields
- IBM MQ fields
- IIS fields
- Istio fields
- Jolokia fields
- Jolokia Discovery autodiscover provider fields
- Kafka fields
- Kibana fields
- Kubernetes fields
- Kubernetes fields
- KVM fields
- linux fields
- Logstash fields
- Memcached fields
- MongoDB fields
- MSSQL fields
- Munin fields
- MySQL fields
- NATS fields
- Nginx fields
- Openmetrics fields
- Oracle fields
- PHP_FPM fields
- PostgreSQL fields
- Process fields
- Prometheus fields
- Prometheus typed metrics fields
- RabbitMQ fields
- Redis fields
- Redis Enterprise fields
- SQL fields
- Stan fields
- Statsd fields
- System fields
- Tomcat fields
- Traefik fields
- uWSGI fields
- vSphere fields
- Windows fields
- ZooKeeper fields
- Monitor
- Secure
- Troubleshoot
- Get help
- Debug
- Common problems
- "open /compat/linux/proc: no such file or directory" error on FreeBSD
- Metricbeat collects system metrics for interfaces you didn’t configure
- Metricbeat uses too much bandwidth
- Error loading config file
- Found unexpected or unknown characters
- Logstash connection doesn’t work
- Publishing to Logstash fails with "connection reset by peer" message
- @metadata is missing in Logstash
- Not sure whether to use Logstash or Beats
- SSL client fails to connect to Logstash
- Monitoring UI shows fewer Beats than expected
- Dashboard could not locate the index-pattern
- Contribute to Beats
linux fields
editlinux fields
editlinux module
linux
editlinux system metrics
conntrack
editconntrack
summary
editsummary of nf_conntrack statistics, summed across CPU cores
-
linux.conntrack.summary.drop -
packets dropped due to conntrack failiure
type: long
-
linux.conntrack.summary.early_drop -
conntrack entries dropped to make room for new ones
type: long
-
linux.conntrack.summary.entries -
entries in the conntrack table
type: long
-
linux.conntrack.summary.found -
successfully searched entries
type: long
-
linux.conntrack.summary.ignore -
packets seen already connected to a conntrack entry
type: long
-
linux.conntrack.summary.insert_failed -
Number of entries where list insert insert failed
type: long
-
linux.conntrack.summary.invalid -
packets seen that cannot be tracked
type: long
-
linux.conntrack.summary.search_restart -
table lookups which had to be restarted due to table resizes
type: long
iostat
editiostat
-
linux.iostat.read.request.merges_per_sec -
The number of read requests merged per second that were queued to the device.
type: float
-
linux.iostat.write.request.merges_per_sec -
The number of write requests merged per second that were queued to the device.
type: float
-
linux.iostat.read.request.per_sec -
The number of read requests that were issued to the device per second
type: float
-
linux.iostat.write.request.per_sec -
The number of write requests that were issued to the device per second
type: float
-
linux.iostat.read.per_sec.bytes -
The number of Bytes read from the device per second.
type: float
format: bytes
-
linux.iostat.read.await -
The average time spent for read requests issued to the device to be served.
type: float
-
linux.iostat.write.per_sec.bytes -
The number of Bytes write from the device per second.
type: float
format: bytes
-
linux.iostat.write.await -
The average time spent for write requests issued to the device to be served.
type: float
-
linux.iostat.request.avg_size -
The average size (in bytes) of the requests that were issued to the device.
type: float
-
linux.iostat.queue.avg_size -
The average queue length of the requests that were issued to the device.
type: float
-
linux.iostat.await -
The average time spent for requests issued to the device to be served.
type: float
-
linux.iostat.service_time -
The average service time (in milliseconds) for I/O requests that were issued to the device.
type: float
-
linux.iostat.busy -
Percentage of CPU time during which I/O requests were issued to the device (bandwidth utilization for the device). Device saturation occurs when this value is close to 100%.
type: float
ksm
editksm
stats
editKSM statistics
-
linux.ksm.stats.pages_shared -
Shared pages in use.
type: long
-
linux.ksm.stats.pages_sharing -
Sites sharing pages.
type: long
-
linux.ksm.stats.pages_unshared -
Unique pages.
type: long
-
linux.ksm.stats.full_scans -
Number of times mergable pages have been scanned.
type: long
-
linux.ksm.stats.stable_node_chains -
Pages that have reached max_page_sharing.
type: long
-
linux.ksm.stats.stable_node_dups -
Number of duplicated KSM pages.
type: long
memory
editLinux memory data
page_stats
editmemory page statistics
-
linux.memory.page_stats.pgscan_kswapd.pages -
pages scanned by kswapd
type: long
format: number
-
linux.memory.page_stats.pgscan_direct.pages -
pages scanned directly
type: long
format: number
-
linux.memory.page_stats.pgfree.pages -
pages freed by the system
type: long
format: number
-
linux.memory.page_stats.pgsteal_kswapd.pages -
number of pages reclaimed by kswapd
type: long
format: number
-
linux.memory.page_stats.pgsteal_direct.pages -
number of pages reclaimed directly
type: long
format: number
-
linux.memory.page_stats.direct_efficiency.pct -
direct reclaim efficiency percentage. A lower percentage indicates the system is struggling to reclaim memory.
type: scaled_float
format: percent
-
linux.memory.page_stats.kswapd_efficiency.pct -
kswapd reclaim efficiency percentage. A lower percentage indicates the system is struggling to reclaim memory.
type: scaled_float
format: percent
hugepages
editThis group contains statistics related to huge pages usage on the system.
-
linux.memory.hugepages.total -
Number of huge pages in the pool.
type: long
format: number
-
linux.memory.hugepages.used.bytes -
Memory used in allocated huge pages.
type: long
format: bytes
-
linux.memory.hugepages.used.pct -
Percentage of huge pages used.
type: long
format: percent
-
linux.memory.hugepages.free -
Number of available huge pages in the pool.
type: long
format: number
-
linux.memory.hugepages.reserved -
Number of reserved but not allocated huge pages in the pool.
type: long
format: number
-
linux.memory.hugepages.surplus -
Number of overcommited huge pages.
type: long
format: number
-
linux.memory.hugepages.default_size -
Default size for huge pages.
type: long
format: bytes
pageinfo
editpageinfo
buddy_info
editData from /proc/buddyinfo grouping used pages by order
DMA
editDMA page Data
-
linux.pageinfo.buddy_info.DMA.0 -
free chunks of 2^0*PAGE_SIZE
type: long
-
linux.pageinfo.buddy_info.DMA.1 -
free chunks of 2^1*PAGE_SIZE
type: long
-
linux.pageinfo.buddy_info.DMA.2 -
free chunks of 2^2*PAGE_SIZE
type: long
-
linux.pageinfo.buddy_info.DMA.3 -
free chunks of 2^3*PAGE_SIZE
type: long
-
linux.pageinfo.buddy_info.DMA.4 -
free chunks of 2^4*PAGE_SIZE
type: long
-
linux.pageinfo.buddy_info.DMA.5 -
free chunks of 2^5*PAGE_SIZE
type: long
-
linux.pageinfo.buddy_info.DMA.6 -
free chunks of 2^6*PAGE_SIZE
type: long
-
linux.pageinfo.buddy_info.DMA.7 -
free chunks of 2^7*PAGE_SIZE
type: long
-
linux.pageinfo.buddy_info.DMA.8 -
free chunks of 2^8*PAGE_SIZE
type: long
-
linux.pageinfo.buddy_info.DMA.9 -
free chunks of 2^9*PAGE_SIZE
type: long
-
linux.pageinfo.buddy_info.DMA.10 -
free chunks of 2^10*PAGE_SIZE
type: long
-
linux.pageinfo.nodes.* -
Raw allocation info from /proc/pagetypeinfo
type: object