Metricbeat don't get all mounting points for filesystems

Elastic Stack Beats
1

Hello all,
I need some help with a problem about my metricbeat setup.
I'm trying to monitor my elasticsearch server disks with metricbeat.
In the elasticsearch servers I created a LVM and mounted it in /var/lib/elasticsearch.
The problem is my metricbeat can't monitor it. It just get the "/" and the "/boot/efi" filesystems.
I have another server with a LVM mounted in "/work" and in this case, metricbeat can monitor that filesystem.
I figure out that metricbeat just can't monitor LVMs mounted in some "linux known" directories.
Please, could someone help me with it?
Follow my filesystems:

Filesystem                         Size  Used Avail Use% Mounted on
devtmpfs                           7.2G     0  7.2G   0% /dev
tmpfs                              7.3G     0  7.3G   0% /dev/shm
tmpfs                              7.3G  753M  6.5G  11% /run
tmpfs                              7.3G     0  7.3G   0% /sys/fs/cgroup
/dev/sdb3                           39G  7.3G   32G  19% /
/dev/sdb1                          200M  8.6M  192M   5% /boot/efi
/dev/mapper/vg_elastic-lv_elastic  2.0T  374G  1.6T  20% /var/lib/elasticsearch
10.0.12.71:/elk                    8.0E  1.2T  8.0E   1% /data/elk-history
tmpfs                              1.5G     0  1.5G   0% /run/user/0
tmpfs                              1.5G     0  1.5G   0% /run/user/993
tmpfs                              1.5G     0  1.5G   0% /run/user/1000

Follow my system.yaml setup:

- module: system
  period: 10s
  metricsets:
    - cpu
    - load
    - memory
    - network
    - process
    - process_summary
    - socket_summary
    #- entropy
    #- core
    #- diskio
    #- socket
    #- service
    #- users
  process.include_top_n:
    by_cpu: 5      # include top 5 processes by CPU
    by_memory: 5   # include top 5 processes by memory

- module: system
  period: 1m
  metricsets:
    - filesystem
    - fsstat
  processors:
  - drop_event.when.regexp:
      system.filesystem.mount_point: '^/(sys|cgroup|proc|dev|etc|host|lib|snap)($|/)'

- module: system
  period: 15m
  metricsets:
    - uptime
2

I wonder if you can find a solution in this thread: Metricbeat - 'system' -> 'filesystem' metrics does not include network drives

3

That discussion helped me to understand some configurations but didn't solve my problem.
Based on that discussion I made a configuration where I just set the FS type nfs to be ignored:

Dec 18 12:50:24 vinelk501esf metricbeat: 2020-12-18T12:50:24.148-0300#011INFO#011filesystem/filesystem.go:57#011Ignoring filesystem types: nfs
Dec 18 12:52:33 vinelk501esf metricbeat: 2020-12-18T12:52:33.012-0300#011INFO#011filesystem/filesystem.go:57#011Ignoring filesystem types: nfs
Dec 18 12:52:33 vinelk501esf metricbeat: 2020-12-18T12:52:33.014-0300#011INFO#011filesystem/filesystem.go:57#011Ignoring filesystem types: nfs

But metricbeat can't get metrics from my "/dev/mapper/vg_elastic-lv_elastic" mounted on "/var/lib/elasticsearch".

I believe the problem is because I didn't mounted the LVM on "/var", but I'm not sure.

I figure it out mounting my "/dev/mapper/vg_elastic-lv_elastic" on "/work/elasticsearch".

I'll very happy if someone can help with it.

Regards,
Vinicius

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.