Bucket Aggregate not working in newer versions

Hi team,
Previously I had a visualisation for top 10 VMS showing the cou usage of the infrastructure. The concept behind the visualisation was:

  • The data was collected from metricbeat
  • Average of system.cpu.user.pct, system.cpu.system.pct, system.cpu.cores was calculated and then each average was stored in 3 different variables. Using painless script in bucket aggregation user.pct was added to system.pct and divided by cores.

We found after the upgrade has been done, the values are showing hyphen instead of values.

Please suggest some workaround.

Hi,

Is your metricbeat agent sending in the normalised values?

system.​cpu.​total.​norm.​pct
system.​cpu.​idle.​norm.​pct
system.​cpu.​iowait.​norm.​pct
system.​cpu.​irq.​norm.​pct
system.​cpu.​nice.​norm.​pct
system.​cpu.​softirq.​norm.​pct
system.​cpu.​steal.​norm.​pct
system.​cpu.​system.​norm.​pct
system.​cpu.​user.​norm.​pct

system.cpu.cores

The number of CPU cores present on the host. The non-normalized percentages will have a maximum value of 100% * cores. The normalized percentages already take this value into account and have a maximum value of 100%.

Hi,
I don't have any normalized fields in my data.
Apologies for the delay in response.

Update your metricbeat system configuration to

cpu.metrics: ["percentages","normalized_percentages"]

per the documentation and you will get both the raw percentages and the calculated/normalized percentage which does the division by number of cores for you.