Hi
I'm using a script to get some metrics from an elastic cluster, and there some metrics that still confuse me a lot, one of them is the index_total metric; when I cross reference this data with the value that the logstash are putting into the cluster, the numbers don't match. For example sometimes I have the double of indexed documents that logstash accuse me and others, I have 1/3 more.
There's something I am missing with this metric?, the store in replicas count as indexed?, another kind of operation make the value of this metric move up?
I am using ELK 5.6 in a 3 node cluster
Hope you can enlighten me in this topic.
And thanks in advance
Regards
Rod