Question about filebeat monitor metrics

Hi , I am new to ES Stack . I am trying to improve the performance of filebeat publishing events to logstash by monitioring tool. I find it disturbing when I saw the Graph of Event Rate :



Though I have read the notes at the right top corner , I am still confused about the metrics:

  1. Does Total should equal to ( Emitted + Acknowledged + Queued) ? Whats the meaning of the left amount(Total - Emitted - Acknowledged - Queued)?
  2. Should Total gets far more than Emitted?
  3. Is it normal for a filebeat instance that New is far more than Emitted?

I have read the document on Elastic site and searched on google but still fond no clear description. I would be much grateful for anyone who are full of patience to help me solve the problems above.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.