# Metricbeat: Harddisk space used changing very dynamically

**URL:** <https://discuss.elastic.co/t/metricbeat-harddisk-space-used-changing-very-dynamically/154604>\
**Category:** Beats\
**Tags:** metricbeat\
**Created:** [October 30, 2018, 9:55am UTC](https://discuss.elastic.co/t/metricbeat-harddisk-space-used-changing-very-dynamically/154604 "2018-10-30T09:55:44Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ruthvik\_Sai](https://avatars.discourse-cdn.com/v4/letter/r/a587f6/32.png) [@Ruthvik\_Sai](https://discuss.elastic.co/u/Ruthvik_Sai)\
**Post date:** [October 30, 2018, 9:55am UTC](https://discuss.elastic.co/t/metricbeat-harddisk-space-used-changing-very-dynamically/154604/1 "2018-10-30T09:55:44Z")

</div>

![Screenshot%20(67)](https://us1.discourse-cdn.com/elastic/original/3X/0/1/0108bd927eb9c8820d27ec5138b12d83b5b1fe74.png) ![Screenshot%20(65)](https://us1.discourse-cdn.com/elastic/original/3X/b/5/b5b1440e6f4176623c206ade68412213c9a0c394.png) ![Screenshot%20(66)](https://us1.discourse-cdn.com/elastic/original/3X/3/4/34aa0a09b15f9d80a46ee332b503bf88cb57a505.png) ![Screenshot%20(63)](https://us1.discourse-cdn.com/elastic/original/3X/5/c/5cf2a424844dcad6ac6b8d2dd596ee068892e4ee.png) ![Screenshot%20(64)](https://us1.discourse-cdn.com/elastic/original/3X/1/8/18640a04540f00b02a46215a13c71b62df366f44.png) !

Why is the hard disk space varying so dynamically?? The above is the cumulative hard disk space used from 5 desktop end points.  
To get the the above visualisation for used space, I used sum aggregation followed by cumulative sum aggregation. I have attached the screen shot.

 ![Screenshot%20(68)](https://us1.discourse-cdn.com/elastic/original/3X/6/c/6cc672095413f61b0cdbf8efb34418bd79f56063.png)

How can I get a more stable plot depicting the hard disk used?

---

<div class="post-metadata">

**Author:** ![Ruthvik\_Sai](https://avatars.discourse-cdn.com/v4/letter/r/a587f6/32.png) [@Ruthvik\_Sai](https://discuss.elastic.co/u/Ruthvik_Sai)\
**Post date:** [October 30, 2018, 9:59am UTC](https://discuss.elastic.co/t/metricbeat-harddisk-space-used-changing-very-dynamically/154604/2 "2018-10-30T09:59:19Z")

</div>

Also note that the beats are continuously active and are not going into inactive mode? Could it be because of the irregular count from the metric beat as it is represented in the following diagram

 ![Screenshot%20(61)](https://us1.discourse-cdn.com/elastic/original/3X/c/1/c1bf564870f039eebebb50021a91c541b9db3abb.png) !

---

<div class="post-metadata">

**Author:** ![jsoriano](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jsoriano/32/27920_2.png) [@jsoriano](https://discuss.elastic.co/u/jsoriano)\
**Post date:** [October 30, 2018, 11:35am UTC](https://discuss.elastic.co/t/metricbeat-harddisk-space-used-changing-very-dynamically/154604/3 "2018-10-30T11:35:50Z")

</div>

Hi @Ruthvik_Sai,

Why are you doing the `Series Agg`? How was the graph without it?

For the events count, lets continue the discussion in [your original thread](https://discuss.elastic.co/t/metricbeat-why-is-the-count-of-the-beat-varying-so-much/154435).

---

<div class="post-metadata">

**Author:** ![Ruthvik\_Sai](https://avatars.discourse-cdn.com/v4/letter/r/a587f6/32.png) [@Ruthvik\_Sai](https://discuss.elastic.co/u/Ruthvik_Sai)\
**Post date:** [October 31, 2018, 9:25am UTC](https://discuss.elastic.co/t/metricbeat-harddisk-space-used-changing-very-dynamically/154604/4 "2018-10-31T09:25:54Z")

</div>

Hi @jsoriano,  
I want to get the total hard disk space used in all the 5 desktop end points. So for this I am using the following procedure:

1. take the individual average of cpu usage of individual desktops
2. Sum each of the values from above together and display it

For the 2nd step I am using series aggregation...  
Without series agg, I get individual components of each host

I also had a question: the metric aggregations like avg, sum are dependent on the time interval in which they are aggregated. So what is the time interval for which they are calculated. Is it dependent on the beat's frequency (period of sending beats)

Thanks

---

<div class="post-metadata">

**Author:** ![Ruthvik\_Sai](https://avatars.discourse-cdn.com/v4/letter/r/a587f6/32.png) [@Ruthvik\_Sai](https://discuss.elastic.co/u/Ruthvik_Sai)\
**Post date:** [October 31, 2018, 10:52am UTC](https://discuss.elastic.co/t/metricbeat-harddisk-space-used-changing-very-dynamically/154604/5 "2018-10-31T10:52:34Z")

</div>

![Screenshot%20(77)](https://us1.discourse-cdn.com/elastic/original/3X/d/9/d909f403f5acbcec615a19191965807d81417ef6.png) ![Screenshot%20(78)](https://us1.discourse-cdn.com/elastic/original/3X/6/4/64e507566d6917c2d6aaa20f94642fdd2a9e8dee.png) ![Screenshot%20(76)](https://us1.discourse-cdn.com/elastic/original/3X/a/0/a019982dc9b8f8e45fb5f42d82490b837e9382d1.png) !

Hi @jsoriano,  
If you notice in the above 3 screenshots, the total hard disk represented in green color has changed from 1.4 tb to 1.8 tb to 2.3 tb as I have changed the time interval on the right side corner.

But I want it to remain 2.3 tb because **it is the total capacity of the 5 desktops I am monitoring throughout whether I keep the interval for 24 hrs or 7 days**. I want it to remain like this even if the desktops are switched off. How can this change be incorporated? I have used following in the visual builder:

 ![Screenshot%20(82)](https://us1.discourse-cdn.com/elastic/original/3X/4/0/4091a7e6026ec4e79fb84ecd368eee63d218b539.png)

wo doing the overall max I get like this:

 ![Screenshot%20(83)](https://us1.discourse-cdn.com/elastic/original/3X/4/1/41579e9c02e87cf1e14563a332bb8d747d15badd.png)

Thanks

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 28, 2018, 10:52am UTC](https://discuss.elastic.co/t/metricbeat-harddisk-space-used-changing-very-dynamically/154604/6 "2018-11-28T10:52:43Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
