According to Metricbeat Docker module exported fields, docker.cpu.total.pct represents the Total CPU usage.
For example, I am running elasticsearch as a docker service with 2 replicas, so docker.container.labels.com_docker_swarm_task_name would be elasticsearch.1 and elasticsearch.2. The docker.container.labels.com_docker_swarm_service_name is the same for these two replicas, which is elasticsearch. My question is Does docker.cpu.total.pct gives me the CPU usage of the elasticsearch or individual replicas (elasticsearch.1 and elasticsearch.2)? In the latter case, in order to get the CPU usage of the elasticsearch, I need to aggregate the docker.cpu.total.pct of two replicas(elasticsearch.service.cpu = elasticserach.1.cpu + elasticsearch.2.cpu).