# It is not possible exclude specific mount point from metricbeat measurement

**URL:** <https://discuss.elastic.co/t/it-is-not-possible-exclude-specific-mount-point-from-metricbeat-measurement/344378>\
**Category:** Beats\
**Tags:** metricbeat\
**Created:** [October 4, 2023, 10:33am UTC](https://discuss.elastic.co/t/it-is-not-possible-exclude-specific-mount-point-from-metricbeat-measurement/344378 "2023-10-04T10:33:22Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![LadaDvorak](https://avatars.discourse-cdn.com/v4/letter/l/5fc32e/32.png) [@LadaDvorak](https://discuss.elastic.co/u/LadaDvorak)\
**Post date:** [October 4, 2023, 10:33am UTC](https://discuss.elastic.co/t/it-is-not-possible-exclude-specific-mount-point-from-metricbeat-measurement/344378/1 "2023-10-04T10:33:22Z")

</div>

I use metricbeat on linux server to detect free disk space on disk.

My metricbeat.yml is set like this:

```auto
processors:
    -drop_event.when.regexp:
       system.filesystem.mount_point: ‘^ / (sys | cgroup | proc | run | netns | dev | etc | host | lib) ($ | /) ′
  enabled: true
  period: 1h
  filesystem.ignore_types: [tmpfs, sysfs, proc, devtmpfs, devpts, nsfs, securityfs, cgroup2, pstore, bpf]

```

even so I receive in metricbeat-index, record with these properties:

```auto
    "system.filesystem.mount_point": [
      "/run/netns/cni-326c03fa-5399-1cd4-7b30-6d30099cca9b"
    ],
    "system.filesystem.device_name": [
      "nsfs"
    ],
    "system.filesystem.free": [
      0
    ],

```

How can I really exclude these mounts:

```auto
nsfs on /run/netns/cni-326c03fa-5399-1cd4-7b30-6d30099cca9b type nsfs (rw)
nsfs on /run/netns/cni-81b49f4e-d09f-7a4d-5a30-005ab7ecdf8a type nsfs (rw)
nsfs on /run/netns/cni-37acdf3f-4b01-e81a-a0ee-27e2bd5d9268 type nsfs (rw)

```

from measurement and let there only this wanted ext4 mount ?

```auto
/dev/sda3 on / type ext4 (rw,relatime,errors=remount-ro)

```

TY for any help or direction.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 1, 2023, 12:33pm UTC](https://discuss.elastic.co/t/it-is-not-possible-exclude-specific-mount-point-from-metricbeat-measurement/344378/2 "2023-11-01T12:33:26Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.