# Metricbeat Tx and Rx Rates

**URL:** <https://discuss.elastic.co/t/metricbeat-tx-and-rx-rates/68731>\
**Category:** Beats\
**Tags:** metricbeat\
**Created:** [December 12, 2016, 3:30pm UTC](https://discuss.elastic.co/t/metricbeat-tx-and-rx-rates/68731 "2016-12-12T15:30:20Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Vivek\_Raj](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vivek_raj/32/45342_2.png) [@Vivek\_Raj](https://discuss.elastic.co/u/Vivek_Raj)\
**Post date:** [December 12, 2016, 3:30pm UTC](https://discuss.elastic.co/t/metricbeat-tx-and-rx-rates/68731/1 "2016-12-12T15:30:20Z")

</div>

Hi Guys,

I'm having some issue while pulling the network stats, we want to capture TX and RX values and we able to pull the values to Elasticsearch but on kibana its showing larger values compare to value on the server. How to resolve it???

Even we have same issues with memory usage and load average its shows bigger values on kibana.

---

<div class="post-metadata">

**Author:** ![Vivek\_Raj](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vivek_raj/32/45342_2.png) [@Vivek\_Raj](https://discuss.elastic.co/u/Vivek_Raj)\
**Post date:** [December 12, 2016, 3:30pm UTC](https://discuss.elastic.co/t/metricbeat-tx-and-rx-rates/68731/2 "2016-12-12T15:30:50Z")

</div>

@magnusbaeck can you help me on this thanks.

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [December 12, 2016, 6:05pm UTC](https://discuss.elastic.co/t/metricbeat-tx-and-rx-rates/68731/3 "2016-12-12T18:05:10Z")

</div>

You could use [Timelion](https://www.elastic.co/guide/en/kibana/5.1/timelion.html) ([Github](https://github.com/elastic/timelion)) to compute a derivative to get Tx and Rx rates. Related: [https://github.com/elastic/beats/issues/2783](https://github.com/elastic/beats/issues/2783)

---

<div class="post-metadata">

**Author:** ![Vivek\_Raj](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vivek_raj/32/45342_2.png) [@Vivek\_Raj](https://discuss.elastic.co/u/Vivek_Raj)\
**Post date:** [December 13, 2016, 6:08pm UTC](https://discuss.elastic.co/t/metricbeat-tx-and-rx-rates/68731/4 "2016-12-13T18:08:44Z")

</div>

how to specify particular host here

.es(index='metricbeat-_', q='_', metric='max:system.network.in.bytes').derivative().color(#f66)

@andrewkroh

---

<div class="post-metadata">

**Author:** ![Vivek\_Raj](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vivek_raj/32/45342_2.png) [@Vivek\_Raj](https://discuss.elastic.co/u/Vivek_Raj)\
**Post date:** [December 13, 2016, 6:09pm UTC](https://discuss.elastic.co/t/metricbeat-tx-and-rx-rates/68731/5 "2016-12-13T18:09:30Z")

</div>

thank You

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [December 13, 2016, 6:50pm UTC](https://discuss.elastic.co/t/metricbeat-tx-and-rx-rates/68731/6 "2016-12-13T18:50:09Z")

</div>

You can specify a Lucene query with `.es(q="beat.hostname:myhost")`

---

<div class="post-metadata">

**Author:** ![Vivek\_Raj](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vivek_raj/32/45342_2.png) [@Vivek\_Raj](https://discuss.elastic.co/u/Vivek_Raj)\
**Post date:** [December 13, 2016, 6:55pm UTC](https://discuss.elastic.co/t/metricbeat-tx-and-rx-rates/68731/7 "2016-12-13T18:55:45Z")

</div>

it worked thanks @andrewkroh. You guys are awesome

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 10, 2017, 6:56pm UTC](https://discuss.elastic.co/t/metricbeat-tx-and-rx-rates/68731/8 "2017-01-10T18:56:20Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
