Kibana Infrastructure data source

Elastic Observability Metrics
1

I'd wonder, if Kibana Infrastructure app can support data source other than metricbeat.

I am now collecting system metrics by Collectd. I assume Infrastructure app is looking for pre-defined field names. Can I modify field names in Collectd by Logstash, so that Infrastructure app can recognize those data.

2

If you follow ECS and the metric schema used in the system module of Metricbeat (here memory as an example: https://github.com/elastic/beats/blob/master/metricbeat/module/system/memory/_meta/fields.yml) the above should work.

3

Will give it a try and feedback.

Many Thanks @ruflin for the confirmation.

4

Here is a list of the fields that the Infrastructure UI uses: https://www.elastic.co/guide/en/infrastructure/guide/current/install-infrastructure-monitoring.html#_which_fields_are_used_for_the_metrics_on_the_infrastructure_home_page

5

I have successfully enabled CPU, memory, load metrics in Infrastructure UI. But inbound and outbound traffic are always 0 bits.

I have both system.netowrk.in.bytes and system.netowrk.out.bytes in place, both of which are type number. However, these two metrics are not unique in a host, as there may have multiple NIC. Any advise?

BTW, according to the document, the UI will use max of system.netowrk.in.bytes and max of system.netowrk.out.bytes, here what's the max mean? max across NIC, or max across time interval?

7

i think its related to this issue

My current data collection interval is 5 minutes

8

Well spotted, thank you! Currently it is max across all documents in the time interval, which does not look correct. We're tracking this in [Infra UI] system.network.* not displayed by interface name · Issue #37225 · elastic/kibana · GitHub .

9

@Jehutywong There is a bug with the metrics on the main "Inventory" view that is calculating the in/out traffic, it's not accounting for ALL the interfaces. The values on the "metrics page" view are correct and are sum total of all the interfaces.

10

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.