# Incorrect Filebeat Metrics
**URL:** https://discuss.elastic.co/t/incorrect-filebeat-metrics/325540
**Category:** Beats
**Tags:** elastic-stack-monitoring, filebeat
**Created:** [February 15, 2023, 5:19am UTC](https://discuss.elastic.co/t/incorrect-filebeat-metrics/325540 "2023-02-15T05:19:34Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@vinit0711](https://discuss.elastic.co/u/vinit0711)
#### Post date: [February 15, 2023, 5:19am UTC](https://discuss.elastic.co/t/incorrect-filebeat-metrics/325540/1 "2023-02-15T05:19:34Z")
I have Netflow Input For Filebeat . Fiebeat is processing the flow and sending to Elastic. I am receiving following metric logs From filebeat which are generated after every 30s
```auto
{"monitoring":{"metrics":{"beat":{"cgroup":{"cpuacct":{"total":{"ns":30270031677}},"memory":{"mem":{"usage":{"bytes":48672768}}}},"cpu":{"system":{"ticks":3026210,"time":{"ms":1739}},"total":{"ticks":58719600,"time":{"ms":30278},"value":58719600},"user":{"ticks":55693390,"time":{"ms":28539}}},"handles":{"limit":{"hard":262144,"soft":1024},"open":18},"info":{"ephemeral_id":"7e4a3a28-664a-4418-a2ee-620584a7613a","uptime":{"ms":55200593},"version":"7.17.7"},"memstats":{"gc_next":420454056,"memory_alloc":247884688,"memory_total":9291195446888,"rss":563015680},"runtime":{"goroutines":77}},"filebeat":{"events":{"active":-4142,"added":255712,"done":259854},"harvester":{"open_files":0,"running":0},"input":{"netflow":{"flows":255712,"packets":{"received":10485}}}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":259854,"active":7868,"batches":32,"total":251538},"read":{"bytes":1728564},"write":{"bytes":386834234}},"pipeline":{"clients":1,"events":{"active":12453,"published":255748,"total":255748},"queue":{"acked":259854}}},"registrar":{"states":{"current":0}},"system":{"load":{"1":17.68,"5":18.28,"15":18.76,"norm":{"1":0.5525,"5":0.5713,"15":0.5863}}}}}}
```
The filebeat.events.active value is always negative . According to my understanding filebeat.events.active indicates the current number of events in the Filebeat event queue . So what does the negative number indicate here ?
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 15, 2023, 7:19am UTC](https://discuss.elastic.co/t/incorrect-filebeat-metrics/325540/2 "2023-03-15T07:19:39Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.