SUM aggregation result off by a factor of 10?

Im amending the Metricbeats data rate visualization to calculate bandwidth rates from my netflow data.

I think ive got the right fields calculated (below), but my results values x10 what they should be.

I'm setting the flow data manually, so i know these should be 1MBs / 4MBs / 8MBs. Below a timelion chart showing the right values.

Any idea why my metric numbers are off?

I think i've hacked this by adding the Calculation:

variable nbytes = Sum of netflow.bytes

params.nbytes / 10

But this seems a bit of a cheat

Are you using the bytes formatter (in the options tab)? Is the result as expected with this switched off?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.