# How to handle windows rate performance counters

**URL:** <https://discuss.elastic.co/t/how-to-handle-windows-rate-performance-counters/114364>\
**Category:** Beats\
**Tags:** metricbeat\
**Created:** [January 6, 2018, 10:31am UTC](https://discuss.elastic.co/t/how-to-handle-windows-rate-performance-counters/114364 "2018-01-06T10:31:59Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Arno\_den\_Uijl](https://avatars.discourse-cdn.com/v4/letter/a/51bf81/32.png) [@Arno\_den\_Uijl](https://discuss.elastic.co/u/Arno_den_Uijl)\
**Post date:** [January 6, 2018, 10:31am UTC](https://discuss.elastic.co/t/how-to-handle-windows-rate-performance-counters/114364/1 "2018-01-06T10:31:59Z")

</div>

Hi,

os: windows 10  
beat: metricbeat-6.1.1-windows-x86\_64

I use metric beat to collect performance counters on windows. It's not clear to me how to handle counters that give a rate (things per second) given the way that performance counters handle rates with sampling periods.

e.g. [Asp.net](http://Asp.net) has a 'Requests/Sec' counter.

If i set period for metricbeat at 5 seconds and fire 50 request within one period of 5 seconds i get the value **10**. That means 10 per second and since the sampling rate is 5 seconds that results in the 50 requests.

If i set period for metricbeat at 2 seconds and fire 50 request within one period of 2 seconds i get the value **25**. That means 25 per second and since the sampling rate is 2 seconds that results in the 50 requests.

So to interpret the value i get I have to know the sampling rate. But in the events i get in elastic i don't know the sampling rate.

For a moment i thought it could be the metricset.rtt, but that is almost always not set.

Whats the best way to handle these kinds of rate events? Can there be some processing done in metricbeat to go from rate to count. Or is that something you would have to build with logstash or pipelines in elastic?

Below the config i use and a sample from the events that get published.

Kind regards,

Arno den Uijl

```auto

- module: windows
  metricsets: ["perfmon"]
  period: 5s
  perfmon.counters:
      - instance_label: '\ASP.NET Apps v4.0.30319( __Total__ )\Requests/Sec.instance'
        measurement_label: '\ASP.NET Apps v4.0.30319\Requests/Sec.value'
        query: '\ASP.NET Apps v4.0.30319( __Total__ )\Requests/Sec'     

```

```auto
2018/01/06 10:27:16.920130 processor.go:275: DBG [publish] Publish event: {
  "@timestamp": "2018-01-06T10:27:16.920Z",
  "@metadata": {
    "beat": "metricbeat",
    "type": "doc",
    "version": "6.1.1"
  },
  "windows": {
    "perfmon": {
      "ASP_NET_Apps_v4_0_30319": {
        "RequestsPerSec": {
          "instance": " __Total__",
          "value": 10.00141823319022
        }
      }
    }
  },
  "metricset": {
    "module": "windows",
    "name": "perfmon"
  },
  "beat": {
    "name": "Biggie",
    "hostname": "Biggie",
    "version": "6.1.1"
  }
}                                                         

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 3, 2018, 10:32am UTC](https://discuss.elastic.co/t/how-to-handle-windows-rate-performance-counters/114364/2 "2018-02-03T10:32:12Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.