fields.asciidoc

Exported Fields

Apache Fields

Apache HTTPD server metricsets collected from the Apache web server.

apache Fields

apache contains the metrics that were scraped from Apache.

status Fields

status contains the metrics that were scraped from the Apache status page.

apache.status.hostname

type: keyword

Apache hostname.

apache.status.total_accesses

type: integer

Total number of access requests.

apache.status.total_kbytes

type: integer

Total number of kilobytes served.

apache.status.requests_per_sec

type: half_float

Requests per second.

apache.status.bytes_per_sec

type: float

Bytes per second.

apache.status.bytes_per_request

type: half_float

Bytes per request.

apache.status.workers.busy

type: integer

Number of busy workers.

apache.status.workers.idle

type: integer

Number of idle workers.

uptime Fields

Uptime stats.

apache.status.uptime.server_uptime

type: integer

Server uptime in seconds.

apache.status.uptime.uptime

type: integer

Server uptime.

cpu Fields

CPU stats.

apache.status.cpu.load

type: half_float

CPU Load.

apache.status.cpu.user

type: half_float

CPU user load.

apache.status.cpu.system

type: half_float

System cpu.

apache.status.cpu.children_user

type: half_float

CPU of children user.

apache.status.cpu.children_system

type: half_float

CPU of children system.

connections Fields

Connection stats.

apache.status.connections.total

type: integer

Total connections.

apache.status.connections.async.writing

type: integer

Async connection writing.

apache.status.connections.async.keep_alive

type: integer

Async keeped alive connections.

apache.status.connections.async.closing

type: integer

Async closed connections.

load Fields

Load averages.

apache.status.load.1

type: half_float

Load average for the last minute.

apache.status.load.5

type: half_float

Load average for the last 5 minutes.

apache.status.load.15

type: half_float

Load average for the last 15 minutes.

scoreboard Fields

Scoreboard metrics.

apache.status.scoreboard.starting_up

type: integer

Starting up.

apache.status.scoreboard.reading_request

type: integer

Reading requests.

apache.status.scoreboard.sending_reply

type: integer

Sending Reply.

apache.status.scoreboard.keepalive

type: integer

Keep alive.

apache.status.scoreboard.dns_lookup

type: integer

Dns Lookups.

apache.status.scoreboard.closing_connection

type: integer

Closing connections.

apache.status.scoreboard.logging

type: integer

Logging

apache.status.scoreboard.gracefully_finishing

type: integer

Gracefully finishing.

apache.status.scoreboard.idle_cleanup

type: integer

Idle cleanups.

apache.status.scoreboard.open_slot

type: integer

Open slots.

apache.status.scoreboard.waiting_for_connection

type: integer

Waiting for connections.

apache.status.scoreboard.total

type: integer

Total.

Beat Fields

Contains common beat fields available in all event types.

beat.name

The name of the Beat sending the log messages. If the shipper name is set in the configuration file, then that value is used. If it is not set, the hostname is used.

beat.hostname

The hostname as returned by the operating system on which the Beat is running.

@timestamp

type: date

example: 2015-01-24 14:06:05.071000

format: YYYY-MM-DDTHH:MM:SS.milliZ

required: True

The timestamp when the event log record was generated.

tags

Arbitrary tags that can be set per Beat and per transaction type.

fields

type: dict

Contains user configurable fields.

Common Fields

Contains common fields available in all event types.

metricset.module

The name of the module that generated the event.

metricset.name

The name of the metricset that generated the event.

metricset.host

Hostname of the machine from which the metricset was collected. This field may not be present when the data was collected locally.

metricset.rtt

type: long

required: True

Event round trip time in microseconds.

type

example: metricsets

required: True

The document type. Always set to "metricsets".

haproxy Fields

haproxy Module

haproxy Fields

stat Fields

stat

haproxy.stat.example

type: keyword

Example field

MongoDB Fields

Metrics collected from MongoDB servers.

mongodb Fields

MongoDB metrics.

status Fields

MongoDB server status metrics.

mongodb.status.version

type: keyword

Instance version.

mongodb.status.uptime.ms

type: long

Instance uptime in milliseconds.

mongodb.status.local_time

type: date

Local time as reported by the MongoDB instance.

mongodb.status.asserts.regular

type: long

Number of regular assertions produced by the server.

mongodb.status.asserts.warning

type: long

Number of warning assertions produced by the server.

mongodb.status.asserts.msg

type: long

Number of msg assertions produced by the server.

mongodb.status.asserts.user

type: long

Number of user assertions produced by the server.

mongodb.status.asserts.rollovers

type: long

Number of rollovers assertions produced by the server.

background_flushing Fields

Data about the process MongoDB uses to write data to disk. This data is only available for instances that use the MMAPv1 storage engine.

mongodb.status.background_flushing.flushes

type: long

A counter that collects the number of times the database has flushed all writes to disk.

mongodb.status.background_flushing.total.ms

type: long

The total number of milliseconds (ms) that the mongod processes have spent writing (i.e. flushing) data to disk. Because this is an absolute value, consider the value of flushes and average_ms to provide better context for this datum.

mongodb.status.background_flushing.average.ms

type: long

The average time spent flushing to disk per flush event.

mongodb.status.background_flushing.last.ms

type: long

The amount of time, in milliseconds, that the last flush operation took to complete.

mongodb.status.background_flushing.last_finished

type: date

A timestamp of the last completed flush operation.

connections Fields

Data regarding the current status of incoming connections and availability of the database server.

mongodb.status.connections.current

type: long

The number of connections to the database server from clients. This number includes the current shell session. Consider the value of available to add more context to this datum.

mongodb.status.connections.available

type: long

The number of unused available incoming connections the database can provide.

mongodb.status.connections.total_created

type: long

A count of all incoming connections created to the server. This number includes connections that have since closed.

journaling Fields

Data about the journaling-related operations and performance. Journaling information only appears for mongod instances that use the MMAPv1 storage engine and have journaling enabled.

mongodb.status.journaling.commits

type: long

The number of transactions written to the journal during the last journal group commit interval.

mongodb.status.journaling.journaled.mb

type: long

The amount of data in megabytes (MB) written to journal during the last journal group commit interval.

mongodb.status.journaling.write_to_data_files.mb

type: long

The amount of data in megabytes (MB) written from journal to the data files during the last journal group commit interval.

mongodb.status.journaling.compression

type: long

The compression ratio of the data written to the journal.

mongodb.status.journaling.commits_in_write_lock

type: long

Count of the commits that occurred while a write lock was held. Commits in a write lock indicate a MongoDB node under a heavy write load and call for further diagnosis.

mongodb.status.journaling.early_commits

type: long

The number of times MongoDB requested a commit before the scheduled journal group commit interval.

times Fields

Information about the performance of the mongod instance during the various phases of journaling in the last journal group commit interval.

mongodb.status.journaling.times.dt.ms

type: long

The amount of time over which MongoDB collected the times data. Use this field to provide context to the other times field values.

mongodb.status.journaling.times.prep_log_buffer.ms

type: long

The amount of time spent preparing to write to the journal. Smaller values indicate better journal performance.

mongodb.status.journaling.times.write_to_journal.ms

type: long

The amount of time spent actually writing to the journal. File system speeds and device interfaces can affect performance.

mongodb.status.journaling.times.write_to_data_files.ms

type: long

The amount of time spent writing to data files after journaling. File system speeds and device interfaces can affect performance.

mongodb.status.journaling.times.remap_private_view.ms

type: long

The amount of time spent remapping copy-on-write memory mapped views. Smaller values indicate better journal performance.

mongodb.status.journaling.times.commits.ms

type: long

The amount of time spent for commits.

mongodb.status.journaling.times.commits_in_write_lock.ms

type: long

The amount of time spent for commits that occurred while a write lock was held.

extra_info Fields

Platform specific data.

mongodb.status.extra_info.heap_usage.bytes

type: long

The total size in bytes of heap space used by the database process. Only available on Unix/Linux.

mongodb.status.extra_info.page_faults

type: long

The total number of page faults that require disk operations. Page faults refer to operations that require the database server to access data that isn’t available in active memory.

network Fields

Platform specific data.

mongodb.status.network.in.bytes

type: long

The amount of network traffic, in bytes, received by this database.

mongodb.status.network.out.bytes

type: long

The amount of network traffic, in bytes, sent from this database.

mongodb.status.network.requests

type: long

The total number of requests received by the server.

opcounters Fields

An overview of database operations by type.

mongodb.status.opcounters.insert

type: long

The total number of insert operations received since the mongod instance last started.

mongodb.status.opcounters.query

type: long

The total number of queries received since the mongod instance last started.

mongodb.status.opcounters.update

type: long

The total number of update operations received since the mongod instance last started.

mongodb.status.opcounters.delete

type: long

The total number of delete operations received since the mongod instance last started.

mongodb.status.opcounters.getmore

type: long

The total number of getmore operations received since the mongod instance last started.

mongodb.status.opcounters.command

type: long

The total number of commands issued to the database since the mongod instance last started.

opcounters_replicated Fields

An overview of database replication operations by type.

mongodb.status.opcounters_replicated.insert

type: long

The total number of replicated insert operations received since the mongod instance last started.

mongodb.status.opcounters_replicated.query

type: long

The total number of replicated queries received since the mongod instance last started.

mongodb.status.opcounters_replicated.update

type: long

The total number of replicated update operations received since the mongod instance last started.

mongodb.status.opcounters_replicated.delete

type: long

The total number of replicated delete operations received since the mongod instance last started.

mongodb.status.opcounters_replicated.getmore

type: long

The total number of replicated getmore operations received since the mongod instance last started.

mongodb.status.opcounters_replicated.command

type: long

The total number of replicated commands issued to the database since the mongod instance last started.

memory Fields

Data about the current memory usage of the mongod server.

mongodb.status.memory.bits

type: long

Either 64 or 32, depending on which target architecture was specified during the mongod compilation process.

mongodb.status.memory.resident.mb

type: long

The amount of RAM, in megabytes (MB), currently used by the database process.

mongodb.status.memory.virtual.mb

type: long

The amount, in megabytes (MB), of virtual memory used by the mongod process.

mongodb.status.memory.mapped.mb

type: long

The amount of mapped memory, in megabytes (MB), used by the database. Because MongoDB uses memory-mapped files, this value is likely to be to be roughly equivalent to the total size of your database or databases.

mongodb.status.memory.mapped_with_journal.mb

type: long

The amount of mapped memory, in megabytes (MB), including the memory used for journaling.

mongodb.status.write_backs_queued

type: boolean

True when there are operations from a mongos instance queued for retrying.

mongodb.status.storage_engine.name

type: keyword

A string that represents the name of the current storage engine.

MySQL Fields

MySQL server status metrics collected from MySQL.

mysql Fields

mysql contains the metrics that were obtained from MySQL query.

status Fields

status contains the metrics that were obtained by the status SQL query.

aborted Fields

Aborted status fields.

mysql.status.aborted.clients

type: integer

The number of connections that were aborted because the client died without closing the connection properly.

mysql.status.aborted.connects

type: integer

The number of failed attempts to connect to the MySQL server.

binlog Fields

mysql.status.binlog.cache.disk_use

type: integer

mysql.status.binlog.cache.use

type: integer

bytes Fields

Bytes stats.

mysql.status.bytes.received

type: integer

The number of bytes received from all clients.

mysql.status.bytes.sent

type: integer

The number of bytes sent to all clients.

mysql.status.connections

type: integer

created Fields

mysql.status.created.tmp.disk_tables

type: integer

mysql.status.created.tmp.files

type: integer

mysql.status.created.tmp.tables

type: integer

delayed Fields

mysql.status.delayed.errors

type: integer

mysql.status.delayed.insert_threads

type: integer

mysql.status.delayed.writes

type: integer

mysql.status.flush_commands

type: integer

mysql.status.max_used_connections

type: integer

open Fields

mysql.status.open.files

type: integer

mysql.status.open.streams

type: integer

mysql.status.open.tables

type: integer

mysql.status.opened_tables

type: integer

Nginx Fields

Nginx server status metrics collected from various modules.

nginx Fields

nginx contains the metrics that were scraped from nginx.

stubstatus Fields

stubstatus contains the metrics that were scraped from the ngx_http_stub_status_module status page.

nginx.stubstatus.hostname

type: keyword

Nginx hostname.

nginx.stubstatus.active

type: integer

The current number of active client connections including Waiting connections.

nginx.stubstatus.accepts

type: integer

The total number of accepted client connections.

nginx.stubstatus.handled

type: integer

The total number of handled client connections.

nginx.stubstatus.dropped

type: integer

The total number of dropped client connections.

nginx.stubstatus.requests

type: integer

The total number of client requests.

nginx.stubstatus.current

type: integer

The current number of client requests.

nginx.stubstatus.reading

type: integer

The current number of connections where Nginx is reading the request header.

nginx.stubstatus.writing

type: integer

The current number of connections where Nginx is writing the response back to the client.

nginx.stubstatus.waiting

type: integer

The current number of idle client connections waiting for a request.

Redis Fields

Redis metrics collected from Redis.

redis Fields

redis contains the information and statistics from Redis.

info Fields

info contains the information and statistics returned by the INFO command.

clients Fields

Redis client stats.

redis.info.clients.connected

type: integer

Number of client connections (excluding connections from slaves).

redis.info.clients.longest_output_list

type: integer

Longest output list among current client connections.

redis.info.clients.biggest_input_buf

type: integer

Biggest input buffer among current client connections.

redis.info.clients.blocked

type: integer

Number of clients pending on a blocking call (BLPOP, BRPOP, BRPOPLPUSH).

cluster Fields

Redis cluster information.

redis.info.cluster.enabled

type: boolean

Indicates that the Redis cluster is enabled.

cpu Fields

Redis CPU stats

redis.info.cpu.used.sys

type: half_float

System CPU consumed by the Redis server.

redis.info.cpu.used.sys_children

type: half_float

User CPU consumed by the Redis server.

redis.info.cpu.used.user

type: half_float

System CPU consumed by the background processes.

redis.info.cpu.used.user_children

type: half_float

User CPU consumed by the background processes.

memory Fields

Redis CPU stats.

redis.info.memory.used.value

type: integer

Used memory.

redis.info.memory.used.rss

type: integer

Used memory rss.

redis.info.memory.used.peak

type: integer

Used memory peak.

redis.info.memory.used.lua

type: integer

Used memory lua.

redis.info.memory.allocator

type: keyword

Memory allocator.

persistence Fields

Redis CPU stats.

redis.info.persistence.loading

type: boolean

None

redis.info.persistence.rdb.changes_since_last_save

type: integer

None

redis.info.persistence.rdb.bgsave_in_progress

type: boolean

None

redis.info.persistence.rdb.last_save_time

type: integer

None

redis.info.persistence.rdb.last_bgsave_status

type: keyword

None

redis.info.persistence.rdb.last_bgsave_time_sec

type: integer

None

redis.info.persistence.rdb.current_bgsave_time_sec

type: integer

None

redis.info.persistence.aof.enabled

type: boolean

None

redis.info.persistence.aof.rewrite_in_progress

type: boolean

None

redis.info.persistence.aof.rewrite_scheduled

type: boolean

None

redis.info.persistence.aof.last_rewrite_time_sec

type: integer

None

redis.info.persistence.aof.current_rewrite_time_sec

type: integer

None

redis.info.persistence.aof.last_bgrewrite_status

type: keyword

None

redis.info.persistence.aof.last_write_status

type: keyword

None

replication Fields

Replication

redis.info.replication.role

type: keyword

None

redis.info.replication.connected_slaves

type: integer

None

redis.info.replication.master_offset

type: integer

None

redis.info.replication.backlog.active

type: integer

None

redis.info.replication.backlog.size

type: integer

None

redis.info.replication.backlog.first_byte_offset

type: integer

None

redis.info.replication.backlog.histlen

type: integer

None

server Fields

Server info

redis.info.server.version

type: keyword

None

redis.info.server.git_sha1

type: keyword

None

redis.info.server.git_dirty

type: keyword

None

redis.info.server.build_id

type: keyword

None

redis.info.server.mode

type: keyword

None

redis.info.server.os

type: keyword

None

redis.info.server.arch_bits

type: keyword

None

redis.info.server.multiplexing_api

type: keyword

None

redis.info.server.gcc_version

type: keyword

None

redis.info.server.process_id

type: integer

None

redis.info.server.run_id

type: keyword

None

redis.info.server.tcp_port

type: integer

None

redis.info.server.uptime

type: integer

None

redis.info.server.hz

type: integer

None

redis.info.server.lru_clock

type: integer

None

redis.info.server.config_file

type: keyword

None

stats Fields

Redis stats.

redis.info.stats.connections.received

type: integer

None

redis.info.stats.connections.rejected

type: integer

None

redis.info.stats.total_commands_processed

type: integer

None

redis.info.stats.total_net_input_bytes

type: integer

None

redis.info.stats.total_net_output_bytes

type: integer

None

redis.info.stats.instantaneous_ops_per_sec

type: integer

None

redis.info.stats.instantaneous_input_kbps

type: float

None

redis.info.stats.instantaneous_output_kbps

type: float

None

redis.info.stats.sync.full

type: integer

None

redis.info.stats.sync.partial_ok

type: integer

None

redis.info.stats.sync.partial_err

type: integer

None

redis.info.stats.keys.expired

type: integer

None

redis.info.stats.keys.evicted

type: integer

None

redis.info.stats.keyspace.hits

type: integer

None

redis.info.stats.keyspace.misses

type: integer

None

redis.info.stats.pubsub_channels

type: integer

None

redis.info.stats.pubsub_patterns

type: integer

None

redis.info.stats.latest_fork_usec

type: integer

None

redis.info.stats.migrate_cached_sockets

type: integer

None

keyspace Fields

keyspace contains the information about the keyspaces returned by the INFO command.

redis.keyspace.id

type: keyword

Keyspace identifier.

redis.keyspace.avg_ttl

type: long

Average ttl.

redis.keyspace.keys

type: long

Number of keys in the keyspace.

redis.keyspace.expires

type: long

System Fields

System status metrics, like CPU and memory usage, that are collected from the operating system.

system Fields

system contains local system metrics.

core Fields

system-core contains local CPU core stats.

system.core.id

type: integer

CPU Core number.

system.core.user.pct

type: half_float

The percentage of CPU time spent in user space. On multi-core systems, you can have percentages that are greater than 100%. For example, if 3 cores are at 60% use, then the cpu.user_p will be 180%.

system.core.user.ticks

type: long

The amount of CPU time spent in user space.

system.core.system.pct

type: half_float

The percentage of CPU time spent in kernel space.

system.core.system.ticks

type: long

The amount of CPU time spent in kernel space.

system.core.nice.pct

type: half_float

The percentage of CPU time spent on low-priority processes.

system.core.nice.ticks

type: long

The amount of CPU time spent on low-priority processes.

system.core.idle.pct

type: half_float

The percentage of CPU time spent idle.

system.core.idle.ticks

type: long

The amount of CPU time spent idle.

system.core.iowait.pct

type: half_float

The percentage of CPU time spent in wait (on disk).

system.core.iowait.ticks

type: long

The amount of CPU time spent in wait (on disk).

system.core.irq.pct

type: half_float

The percentage of CPU time spent servicing and handling hardware interrupts.

system.core.irq.ticks

type: long

The amount of CPU time spent servicing and handling hardware interrupts.

system.core.softirq.pct

type: half_float

The percentage of CPU time spent servicing and handling software interrupts.

system.core.softirq.ticks

type: long

The amount of CPU time spent servicing and handling software interrupts.

system.core.steal.pct

type: half_float

The percentage of CPU time spent in involuntary wait by the virtual CPU while the hypervisor was servicing another processor. Available only on Unix.

system.core.steal.ticks

type: long

The amount of CPU time spent in involuntary wait by the virtual CPU while the hypervisor was servicing another processor. Available only on Unix.

cpu Fields

cpu contains local CPU stats.

system.cpu.user.pct

type: half_float

The percentage of CPU time spent in user space. On multi-core systems, you can have percentages that are greater than 100%. For example, if 3 cores are at 60% use, then the cpu.user_p will be 180%.

system.cpu.system.pct

type: half_float

The percentage of CPU time spent in kernel space.

system.cpu.nice.pct

type: half_float

The percentage of CPU time spent on low-priority processes.

system.cpu.idle.pct

type: half_float

The percentage of CPU time spent idle.

system.cpu.iowait.pct

type: half_float

The percentage of CPU time spent in wait (on disk).

system.cpu.irq.pct

type: half_float

The percentage of CPU time spent servicing and handling hardware interrupts.

system.cpu.softirq.pct

type: half_float

The percentage of CPU time spent servicing and handling software interrupts.

system.cpu.steal.pct

type: half_float

The percentage of CPU time spent in involuntary wait by the virtual CPU while the hypervisor was servicing another processor. Available only on Unix.

system.cpu.user.ticks

type: long

The amount of CPU time spent in user space.

system.cpu.system.ticks

type: long

The amount of CPU time spent in kernel space.

system.cpu.nice.ticks

type: long

The amount of CPU time spent on low-priority processes.

system.cpu.idle.ticks

type: long

The amount of CPU time spent idle.

system.cpu.iowait.ticks

type: long

The amount of CPU time spent in wait (on disk).

system.cpu.irq.ticks

type: long

The amount of CPU time spent servicing and handling hardware interrupts.

system.cpu.softirq.ticks

type: long

The amount of CPU time spent servicing and handling software interrupts.

system.cpu.steal.ticks

type: long

The amount of CPU time spent in involuntary wait by the virtual CPU while the hypervisor was servicing another processor. Available only on Unix.

load Fields

Load averages.

system.cpu.load.1

type: half_float

Load average for the last minute.

system.cpu.load.5

type: half_float

Load average for the last 5 minutes.

system.cpu.load.15

type: half_float

Load average for the last 15 minutes.

diskio Fields

disk contains disk IO metrics collected from the operating system.

system.diskio.name

type: keyword

example: sda1

The disk name.

system.diskio.serial_number

type: keyword

The disk’s serial number. This may not be provided by all operating systems.

system.diskio.read.count

type: long

The total number of reads completed successfully.

system.diskio.write.count

type: long

The total number of writes completed successfully.

system.diskio.read.bytes

type: long

The total number of bytes read successfully. On Linux this is the number of sectors read multiplied by an assumed sector size of 512.

system.diskio.write.bytes

type: long

The total number of bytes written successfully. On Linux this is the number of sectors written multiplied by an assumed sector size of 512.

system.diskio.read.time

type: long

The total number of milliseconds spent by all reads.

system.diskio.write.time

type: long

The total number of milliseconds spent by all writes.

system.diskio.io.time

type: long

The total number of of milliseconds spent doing I/Os.

filesystem Fields

filesystem contains local filesystem stats.

system.filesystem.avail

type: long

The disk space available to an unprivileged user in bytes.

system.filesystem.device_name

type: keyword

The disk name. For example: /dev/disk1

system.filesystem.mount_point

type: keyword

The mounting point. For example: /

system.filesystem.files

type: long

The total number of file nodes in the file system.

system.filesystem.free

type: long

The disk space available in bytes.

system.filesystem.free_files

type: long

The number of free file nodes in the file system.

system.filesystem.total

type: long

The total disk space in bytes.

system.filesystem.used.bytes

type: long

The used disk space in bytes.

system.filesystem.used.pct

type: half_float

The percentage of used disk space.

fsstat Fields

system.fsstat contains filesystem metrics aggregated from all mounted filesystems.

system.fsstat.count

type: long

Number of file systems found.

system.fsstat.total_files

type: long

Total number of files.

total_size Fields

Nested file system docs.

system.fsstat.total_size.free

type: long

Total free space.

system.fsstat.total_size.used

type: long

Total used space.

system.fsstat.total_size.total

type: long

Total space (used plus free).

memory Fields

memory contains local memory stats.

system.memory.total

type: long

Total memory.

system.memory.used.bytes

type: long

Used memory.

system.memory.free

type: long

Available memory.

system.memory.used.pct

type: half_float

The percentage of used memory.

actual Fields

Actual memory fields.

system.memory.actual.used.bytes

type: long

Actual used memory. This value is the "used" memory minus the memory used for disk caches and buffers. Available only on Unix.

system.memory.actual.free

type: long

Actual available memory. This value is the "free" memory plus the memory used for disk caches and buffers. Available only on Unix.

system.memory.actual.used.pct

type: half_float

The percentage of actual used memory.

swap Fields

This group contains statistics related to the swap memory usage on the system.

system.memory.swap.total

type: long

Total swap memory.

system.memory.swap.used.bytes

type: long

Used swap memory.

system.memory.swap.free

type: long

Available swap memory.

system.memory.swap.used.pct

type: half_float

The percentage of used swap memory.

network Fields

network contains network IO metrics for a single network interface.

system.network.name

type: keyword

example: eth0

The network interface name.

system.network.out.bytes

type: long

The number of bytes sent.

system.network.in.bytes

type: long

The number of bytes received.

system.network.out.packets

type: long

The number of packets sent.

system.network.in.packets

type: long

The number or packets received.

system.network.in.errors

type: long

The number of errors while receiving.

system.network.out.errors

type: long

The number of errors while sending.

system.network.in.dropped

type: long

The number of incoming packets that were dropped.

system.network.out.dropped

type: long

The number of outgoing packets that were dropped. This value is always 0 on Darwin and BSD because it is not reported by the operating system.

process Fields

process contains process metadata, CPU metrics, and memory metrics.

system.process.name

type: keyword

The process name.

system.process.state

type: keyword

The process state. For example: "running".

system.process.pid

type: integer

The process pid.

system.process.ppid

type: integer

The process parent pid.

system.process.pgid

type: integer

The process group id.

system.process.cmdline

type: keyword

The full command-line used to start the process, including the arguments separated by space.

system.process.username

type: keyword

The username of the user that created the process. If the username cannot be determined, the field will contain the user’s numeric identifier (UID). On Windows, this field includes the user’s domain and is formatted as domain\username.

cpu Fields

CPU-specific statistics per process.

system.process.cpu.user

type: long

The amount of CPU time the process spent in user space.

system.process.cpu.total.pct

type: half_float

The percentage of CPU time spent by the process since the last update. Its value is similar to the %CPU value of the process displayed by the top command on Unix systems.

system.process.cpu.system

type: long

The amount of CPU time the process spent in kernel space.

system.process.cpu.total.ticks

type: long

The total CPU time spent by the process.

system.process.cpu.start_time

type: keyword

The time when the process was started. Example: "17:45".

memory Fields

Memory-specific statistics per process.

system.process.memory.size

type: long

The total virtual memory the process has.

system.process.memory.rss.bytes

type: long

The Resident Set Size. The amount of memory the process occupied in main memory (RAM).

system.process.memory.rss.pct

type: half_float

The percentage of memory the process occupied in main memory (RAM).

system.process.memory.share

type: long

The shared memory the process uses.

ZooKeeper Fields

ZooKeeper metrics collected by the four-letter monitoring commands.

zookeeper Fields

zookeeper contains the metrics reported by ZooKeeper commands.

mntr Fields

mntr contains the metrics reported by the four-letter mntr command.

zookeeper.mntr.hostname

type: keyword

ZooKeeper hostname.

zookeeper.mntr.approximate_data_size

type: long

Approximate size of ZooKeeper data.

zookeeper.mntr.latency.avg

type: integer

Average latency between ensemble hosts in milliseconds.

zookeeper.mntr.ephemerals_count

type: integer

Number of ephemeral znodes.

zookeeper.mntr.followers

type: integer

Number of followers seen by the current host.

zookeeper.mntr.max_file_descriptor_count

type: integer

Maximum number of file descriptors allowed for the ZooKeeper process.

zookeeper.mntr.latency.max

type: integer

Maximum latency in milliseconds.

zookeeper.mntr.latency.min

type: integer

Minimum latency in milliseconds.

zookeeper.mntr.num_alive_connections

type: integer

Number of connections to ZooKeeper that are currently alive.

zookeeper.mntr.open_file_descriptor_count

type: integer

Number of file descriptors open by the ZooKeeper process.

zookeeper.mntr.outstanding_requests

type: integer

Number of outstanding requests that need to be processed by the cluster.

zookeeper.mntr.packets.received

type: integer

Number of ZooKeeper network packets received.

zookeeper.mntr.packets.sent

type: long

Number of ZooKeeper network packets sent.

zookeeper.mntr.pending_syncs

type: integer

Number of pending syncs to carry out to ZooKeeper ensemble followers.

zookeeper.mntr.server_state

type: keyword

Role in the ZooKeeper ensemble.

zookeeper.mntr.synced_followers

type: integer

Number of synced followers reported when a node server_state is leader.

zookeeper.mntr.version

type: keyword

ZooKeeper version and build string reported.

zookeeper.mntr.watch_count

type: integer

Number of watches currently set on the local ZooKeeper process.

zookeeper.mntr.znode_count

type: integer

Number of znodes reported by the local ZooKeeper process.