Module socket_summary get open connections

Elastic Stack Beats
1

Hello there

I'm using the new system module "socket_summary", to monitor my sockets. Is it possible to monitor the open TCP & UDP connections as well with this module (if not are there other options)? For example can I get a count of all open TCP connections?

Thanks in advance for your help.

2

Hello! Is system.socket.summary.tcp.all.count and system.socket.summary.udp.all.count what you are looking for? Please see https://www.elastic.co/guide/en/beats/metricbeat/current/exported-fields-system.html for more details.

3

Hi @Kaiyan_Sheng thanks for your reply! This is actually exactly what I was looking for. However those metric didn't change while I was testing it. I just realized it was because I'm using the metricbeat container image (docker.elastic.co/beats/metricbeat:6.5.0) it only monitors the TCP connections of the container it's running on. Is there a possibility to monitor the connections of other containers as well, similar to the docker module? Or whats the point of the metricbeat container image? Monitoring a container where only metricbeat is running doesn't make much sense to me.

4

For monitoring the host machine and/or other containers, maybe https://www.elastic.co/guide/en/beats/metricbeat/current/running-on-docker.html#monitoring-host will help?

5

Great, this is what I was looking for. Thank you.

1 Like
6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.