Additional metrics around system.net* such as segments retransmitted?

[slmingol (Sam Mingo)]

I'm looking to try and use metricbeat to triage a performance problem and want to be able to add in segments retransmitted but do not see these as being a tracked metric by metricbeat. Am I missing something or are these types of interface counter statistics not included in what metricbeat collects or can collect?

If so are there any plans to introduce them?

Every 2.0s: netstat -s | egrep -i 'loss|retran'                                                                Sat Dec  7 13:42:21 2019

    76062 segments retransmited
    2380 times recovered from packet loss by selective acknowledgements
    TCPLostRetransmit: 25
    12 timeouts in loss state
    8020 fast retransmits
    2767 forward retransmits
    616 retransmits in slow start
    TCPLossProbes: 106717
    TCPLossProbeRecovery: 53571
    95 SACK retransmits failed
    TCPSynRetrans: 2679

For reference I did take a look at the exported fields - https://www.elastic.co/guide/en/beats/metricbeat/current/exported-fields-system.html.

[ChrsMark (Chris Mark)]

Hi @slmingol!

The list of tracked fields for this Module is the one you are mentioning. So from what I can see there the information you are looking for is not exported.

I'm pinging @Alex_Kristiansen here to evaluate if we could introduce them.

Thanks!

[Alex_Kristiansen]

Hey @slmingol,

I'm currently working on adding Netstat data to the system module. It should be available by 7.6 or 7.7.