# Metricbeat not show volume mount under dev filesystem

**URL:** <https://discuss.elastic.co/t/metricbeat-not-show-volume-mount-under-dev-filesystem/308380>\
**Category:** Metrics\
**Created:** [June 28, 2022, 5:05pm UTC](https://discuss.elastic.co/t/metricbeat-not-show-volume-mount-under-dev-filesystem/308380 "2022-06-28T17:05:36Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Felipe\_Illanes](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/felipe_illanes/32/49396_2.png) [@Felipe\_Illanes](https://discuss.elastic.co/u/Felipe_Illanes)\
**Post date:** [June 28, 2022, 5:05pm UTC](https://discuss.elastic.co/t/metricbeat-not-show-volume-mount-under-dev-filesystem/308380/1 "2022-06-28T17:05:36Z")

</div>

Let me explain the problem. Im searching for a specific mount in a server (actually is a volume added), and when in terminal type **df -aTh | grep "/dev"** for show filesystem, its show this image:

 ![Captura de pantalla de 2022-06-28 12-53-08](https://us1.discourse-cdn.com/elastic/original/3X/8/9/89f43532a18460c5cf0709375e568f29810d35bd.png)

Then in metricbeat.yaml i have this configuration for system module:

```auto
- module: system
  period: 30s
  metricsets: ["filesystem"]
  processors:
   - drop_event.when.regexp:
       system.filesystem.mount_point: '^/(sys|cgroup|proc|etc|host|hostfs)($|/)'

```

Notice in last line i omitted " **dev**" , because i want to obtain the mount volume "/dev/sda" high lighted in the screen shot. But when i discoverd in kibana, that device is not showed, and i dont now why, must be showed.

 ![Captura de pantalla de 2022-06-28 13-02-35](https://us1.discourse-cdn.com/elastic/original/3X/c/5/c5eff5d64743c73b747b0ef63b065bb0ce47b1fb.png)

Please help. Thank you for reading 🙂

---

<div class="post-metadata">

**Author:** ![matschaffer](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/matschaffer/32/95396_2.png) [@matschaffer](https://discuss.elastic.co/u/matschaffer)\
**Post date:** [July 4, 2022, 7:00am UTC](https://discuss.elastic.co/t/metricbeat-not-show-volume-mount-under-dev-filesystem/308380/2 "2022-07-04T07:00:56Z")

</div>

Hi Felipe!

`system.filesystem.mount_point` corresponds to the "Mounted on" (far right) column reported in `df`

Do you see "/mnt/volume\_sfo3\_01" in your data? That would be `/dev/sda`.

You could also filter (or query) using `system.filesystem.device_name` which would give you the "Filesystem" (far left) column of the `df` output.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 1, 2022, 7:01am UTC](https://discuss.elastic.co/t/metricbeat-not-show-volume-mount-under-dev-filesystem/308380/3 "2022-08-01T07:01:13Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.