On 7.9 Metricbeat-Metricset-CPU metrics I see these two entries. which one should I use for total CPU percentage
system.cpu.total.norm.pct 0.026
system.cpu.total.pct 0.211
In the documentation I don't see cpu.total mentioned (System fields | Metricbeat Reference [7.9] | Elastic)
As per documentation: system.cpu.total.norm.pct represents the percentage of CPU time in states other than Idle and IOWait, normalised by the number of cores. Do I need to add IOWait system.cpu.iowait.pct ?
OR Alternately can I just see system.cpu.idle.pct, If IDLE is less than 20% we need to be alerted right ?