I have Netflow Input For Filebeat . Fiebeat is processing the flow and sending to Elastic. I am receiving following metric logs From filebeat which are generated after every 30s
{"monitoring":{"metrics":{"beat":{"cgroup":{"cpuacct":{"total":{"ns":30270031677}},"memory":{"mem":{"usage":{"bytes":48672768}}}},"cpu":{"system":{"ticks":3026210,"time":{"ms":1739}},"total":{"ticks":58719600,"time":{"ms":30278},"value":58719600},"user":{"ticks":55693390,"time":{"ms":28539}}},"handles":{"limit":{"hard":262144,"soft":1024},"open":18},"info":{"ephemeral_id":"7e4a3a28-664a-4418-a2ee-620584a7613a","uptime":{"ms":55200593},"version":"7.17.7"},"memstats":{"gc_next":420454056,"memory_alloc":247884688,"memory_total":9291195446888,"rss":563015680},"runtime":{"goroutines":77}},"filebeat":{"events":{"active":-4142,"added":255712,"done":259854},"harvester":{"open_files":0,"running":0},"input":{"netflow":{"flows":255712,"packets":{"received":10485}}}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":259854,"active":7868,"batches":32,"total":251538},"read":{"bytes":1728564},"write":{"bytes":386834234}},"pipeline":{"clients":1,"events":{"active":12453,"published":255748,"total":255748},"queue":{"acked":259854}}},"registrar":{"states":{"current":0}},"system":{"load":{"1":17.68,"5":18.28,"15":18.76,"norm":{"1":0.5525,"5":0.5713,"15":0.5863}}}}}}
The filebeat.events.active value is always negative . According to my understanding filebeat.events.active indicates the current number of events in the Filebeat event queue . So what does the negative number indicate here ?