Non-zero metrics in the last 30s

Elastic Stack Beats
1

We are on ELK 8.18.3

We are seeing this log

{"log.level":"info","@timestamp":"2025-07-13T19:01:06.799Z","log.logger":"monitoring","log.origin":{"file.name":"log/log.go","file.line":187},"message":"Non-zero metrics in the last 30s","service.name":"metricbeat","monitoring":{"metrics":{"beat":{"cgroup":{"cpu":{"stats":{"periods":43,"throttled":{"ns":1193261624,"periods":8}}},"cpuacct":{"total":{"ns":935350056}},"memory":{"mem":{"usage":{"bytes":193150976}}}},"cpu":{"system":{"ticks":12897990,"time":{"ms":20}},"total":{"ticks":180531480,"time":{"ms":570},"value":180531480},"user":{"ticks":167633490,"time":{"ms":550}}},"handles":{"limit":{"hard":1048576,"soft":1048576},"open":11},"info":{"ephemeral_id":"cba988a8-b9e9-4eb9-9d92-ad61ed404b29","uptime":{"ms":9629370347},"version":"8.9.0"},"memstats":{"gc_next":117366192,"memory_alloc":58268640,"memory_total":26493898091992,"rss":262594560},"runtime":{"goroutines":500}},"libbeat":{"config":{"module":{"running":20}},"output":{"events":{"active":0}},"pipeline":{"clients":20,"events":{"active":0}}},"system":{"load":{"1":57.81,"15":58.24,"5":58.65,"norm":{"1":0.9033,"15":0.91,"5":0.9164}}}},"ecs.version":"1.6.0"}}

Should the norm value being at 90.3% a concern?

"norm":{"1":0.9033,"15":0.91,"5":0.9164}
2

Hi @kbujold_wr

Those are the log periodic messages reported by metricbeat, and report metrics about metric feed itself but also the underlying system. It looks like those are getting picked up and shipped to your elastic cluster, perhaps as monitoring..

Those stats are in the system. Section of this message is just metricbeat reporting what it sees at the system level metrics..

But yeah, whatever host that is it's under pretty significant load... It does not mean filebeat is creating that load. It's just reporting what it sees

It's reporting that the 1-minute load average is 57. Yeah, that's pretty hot..