Metricbeat system.cpu vs system.core

I am creating Kibana Visualilzations from metricbeat. I was looking at system.cpu fields and system.core fields but these two look very similar other than core includes the core.id can someone tell me the difference between the two?

The core metrics contain data about a single core in the system whereas cpu generates a single event containing data from all cores.

For linux systems it collects data from /proc/stat. cpu is data from the first line. And core reports data from the "cpuN" lines.

$cat /proc/stat
cpu  256416272 11359 177251594 27397092577 8781725 206 260037 0 0 0
cpu0 37047435 2111 14022460 3425167481 815656 135 115917 0 0 0
cpu1 35111322 664 14731206 3426355399 1029232 42 37767 0 0 0
cpu2 34873089 735 17121937 3424790244 908890 4 25033 0 0 0
cpu3 34588227 3428 19934949 3422239776 790508 24 25785 0 0 0
cpu4 26534520 921 8135438 3446276716 1550756 0 14316 0 0 0
cpu5 33070450 950 59656234 3387617803 2079904 0 15017 0 0 0
cpu6 26293496 479 8624045 3447059364 649905 0 12703 0 0 0
cpu7 28897729 2068 35025323 3417585792 956871 0 13496 0 0 0

This topic was automatically closed after 21 days. New replies are no longer allowed.