# How to Validate this property system.socket.direction from system?

**URL:** <https://discuss.elastic.co/t/how-to-validate-this-property-system-socket-direction-from-system/147344>\
**Category:** Kibana\
**Created:** [September 5, 2018, 8:46am UTC](https://discuss.elastic.co/t/how-to-validate-this-property-system-socket-direction-from-system/147344 "2018-09-05T08:46:44Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![mmahaja](https://avatars.discourse-cdn.com/v4/letter/m/898d66/32.png) [@mmahaja](https://discuss.elastic.co/u/mmahaja)\
**Post date:** [September 5, 2018, 8:46am UTC](https://discuss.elastic.co/t/how-to-validate-this-property-system-socket-direction-from-system/147344/1 "2018-09-05T08:46:44Z")

</div>

netstat info

# netstat | wc -l

502

and Kibana UI attached.  
[![kibana ui](https://user-images.githubusercontent.com/26953132/45077393-b3417180-b10a-11e8-8e47-da9dfe1d515c.png)](https://user-images.githubusercontent.com/26953132/45077393-b3417180-b10a-11e8-8e47-da9dfe1d515c.png)

Please help me understand, How Can I validate the information shown by Kibana from System

OS: CentOS 7.x  
Kibana: 6.4  
ES: 6.4

---

<div class="post-metadata">

**Author:** ![Nathan\_Reese](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nathan_reese/32/84829_2.png) [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)\
**Post date:** [September 5, 2018, 2:04pm UTC](https://discuss.elastic.co/t/how-to-validate-this-property-system-socket-direction-from-system/147344/2 "2018-09-05T14:04:14Z")

</div>

You could export the data to CSV and try building a similiar chart in a spread sheet. To export the data to CSV, got to the Discover app and create a search that contains the expected data. Then click the `reporting` top nav and follow the instructions

---

<div class="post-metadata">

**Author:** ![mmahaja](https://avatars.discourse-cdn.com/v4/letter/m/898d66/32.png) [@mmahaja](https://discuss.elastic.co/u/mmahaja)\
**Post date:** [September 5, 2018, 5:04pm UTC](https://discuss.elastic.co/t/how-to-validate-this-property-system-socket-direction-from-system/147344/3 "2018-09-05T17:04:52Z")

</div>

Thanks @Nathan_Reese

My Concern is,  
When I am seeing outgoing+incoming from Chart, it is showing 37+32=69 (at 5thSep 12:33)  
But, at the same time, if I am running below command on centOs (from which metric beat is collecting data):  
command--\> # netstat | wc -l  
output--\> # 502

502 is not matching 69 from the chart.

Am i firing the right command at centOS to validate the stat for Kibana?  
Please guide me.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 3, 2018, 5:04pm UTC](https://discuss.elastic.co/t/how-to-validate-this-property-system-socket-direction-from-system/147344/4 "2018-10-03T17:04:53Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
