I am interested in measuring how many calls Elasticsearch is making to the filesystem. The following will be the categories I am looking for:
- write calls with the size of payload
- read calls with the size of payload
Please suggest how I can measure them.
In general,any process(including elasticsearch) will not get access to file system directly. Any process that want to perform a read or write operation on the file system will make api calls to kernel to get the work done.
You can try using auditbeat to monitor process activities where you can filter events specific to elasticsearch process.
If you are on a recent Linux kernel, you might be able to get this level of information using eBPF.