Flow data

Elastic Stack Beats
1

Hi, I am running packetbeat on one of my production servers to analyse the amount of data transfer between my server ip and to all other ips. Below is my flow configuration in packetbeat.yml

packetbeat.flows:

timeout: 150s

Configure reporting period. If set to -1, only killed flows will be reported

period: 1m

My doubt here is, when packetbeat reports flow data for the current minute does it cumulate it with the previous minute's numbers?

2

Yes, the metrics are cumulative. You can use the derivations to get the rates.

3

Thank you so much steffens :slight_smile:

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.