Metricbeat dashboard not displaying accurate avg metrics for every host

[skdasari (Kumar)]

Hello All,

I have setup metricbeat in 4 servers A,B,C,D. A and B are windows servers where C and D are linux servers. In server C I have my ELasticsearch and Kibana setup installaed. When I installed metricbeat in all 4 hosts. This is the config file I used in system module.

Windows:

Module: system

Docs: https://www.elastic.co/guide/en/beats/metricbeat/7.2/metricbeat-module-system.html

• module: system
  period: 30s
  metricsets:

  • cpu
    #- load
  • memory
  • network
  • process
  • process_summary
  • socket_summary
    #- core
    #- diskio
    #- socket
    process.include_top_n:
    by_cpu: 5 # include top 5 processes by CPU
    by_memory: 5 # include top 5 processes by memory

• module: system
  period: 30s
  metricsets:

  • filesystem
  • fsstat
    processors:
  • drop_event.when.regexp:
    system.filesystem.mount_point: '^/(sys|cgroup|proc|dev|etc|host|lib)($|/)'

• module: system
  period: 30s
  metricsets:

  • uptime

Linux:

• module: system
  period: 30s
  metricsets:

  • cpu
  • load
  • memory
  • network
  • process
  • process_summary
  • socket_summary
  • core
  • diskio
  • socket
    process.include_top_n:
    by_cpu: 5 # include top 5 processes by CPU
    by_memory: 5 # include top 5 processes by memory

• module: system
  period: 30s
  metricsets:

• filesystem

• fsstat

processors:

• drop_event.when.regexp:
  system.filesystem.mount_point: '^/(sys|cgroup|proc|dev|etc|host|lib)($|/)'

• module: system
  period: 30s
  metricsets:

  • uptime

Above attached is the overview dashboard. When I am trying to goto individual host The utilization shows as follows

The swap and memory usage which is showing 23% and 22.9%. Not sure why the bar is showing so less.

When you go individually.

They show different values. I need to do a demo in few days. Not sure how I do with all these values showing differently. The visualization also shows pretty weirdly in the gauge. Can some one help me out. Seems like I am pretty much stuck here and unable to move forward.