Unable to fetch system.filesystem.used.pct from metricbeat index

Hi Team,
I am working on creating watcher alert (which would trigger alert when the threshold percent ins exceeded from the target server). My metricbeat index contains almost 30 hostname's in them,but i am now concerned about only one. I don't see the "system.filesystem.used.perct" getting populated for any of the hosts in metribeat index. Please suggest if critical config in missed in metricbeat.yml file.

###################### Metricbeat Configuration Example #######################

# This file is an example configuration file highlighting only the most common
# options. The metricbeat.reference.yml file from the same directory contains all the
# supported options with more comments. You can use it as a reference.
#
# You can find the full configuration reference here:
# https://www.elastic.co/guide/en/beats/metricbeat/index.html

#==========================  Modules configuration ============================

metricbeat.config.modules:
  # Glob pattern for configuration loading
  path: ${path.config}/modules.d/*.yml

  # Set to true to enable config reloading
  reload.enabled: false

  # Period on which files under path should be checked for changes
  #reload.period: 10s

#==================== Elasticsearch template setting ==========================

setup.template.settings:
  index.number_of_shards: 1
  index.codec: best_compression
  #_source.enabled: false
# The name of the shipper that publishes the network data. It can be used to group
# all the transactions sent by a single shipper in the web interface.
#name:

# The tags of the shipper are included in their own field with each
# transaction published.
#tags: ["service-X", "web-tier"]

# Optional fields that you can specify to add additional information to the
# output.
#fields:
#  env: staging


#============================== Dashboards =====================================
# These settings control loading the sample dashboards to the Kibana index. Loading
# the dashboards is disabled by default and can be enabled either by setting the
# options here, or by using the `-setup` CLI flag or the `setup` command.
#setup.dashboards.enabled: true

# The URL from where to download the dashboards archive. By default this URL
# has a value which is computed based on the Beat name and version. For released
# versions, this URL points to the dashboard archive on the artifacts.elastic.co
# website.
#setup.dashboards.url:
#================================ Outputs =====================================

# Configure what output to use when sending the data collected by the beat.

#-------------------------- Elasticsearch output ------------------------------
output.elasticsearch:
  # Array of hosts to connect to.
  hosts: ["rxxxxxxxxx:9200"]

  # Optional protocol and basic auth credentials.
  #protocol: "https"
  username: "elastic"
#================================ Logging =====================================

# Sets log level. The default log level is info.
# Available log levels are: error, warning, info, debug
#logging.level: debug

# At debug level, you can selectively enable logging only for some components.
# To enable all selectors use ["*"]. Examples of other selectors are "beat",
# "publish", "service".
#logging.selectors: ["*"]

#============================== Xpack Monitoring ===============================
# metricbeat can export internal metrics to a central Elasticsearch monitoring
# cluster.  This requires xpack monitoring to be enabled in Elasticsearch.  The
# reporting is disabled by default.

# Set to true to enable the monitoring reporter.
#xpack.monitoring.enabled: false

# Uncomment to send the metrics to Elasticsearch. Most settings from the
# Elasticsearch output are accepted here as well. Any setting that is not set is
# automatically inherited from the Elasticsearch output configuration, so if you
# have the Elasticsearch output configured, you can simply uncomment the
# following line.
#xpack.monitoring.elasticsearch:

Hi @Nithani25!

Do you have system module enabled? And what is the configuration of it?

Also you could try and run Metricbeat in debug mode(./metricbeat -e -d "*") to see if events are sent to Elasticsearch.

C.

Hi Mark,
while i am sure of metricbeat communicating with elasticsearch, the only problem i see here these specific filesystem fields are not getting populated on regular basis.

Events are sent to Elasticsearch but as you mentioned not events for this Metricset maybe.

I would suggest enable only system module and only filesystem metricset and run Metricbeat in debug mode in order to see if this kind of metrics are collected and if not why (by looking in the logs).

C.

Sorry Mark,
how will i be able to enable only system and filesystem module here.

Hey,

have a look into this resource -> https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-metricset-system-filesystem.html

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.