IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Linux conntrack metricset

edit

The conntrack module reports on performance counters for the linux connection tracking component of netfilter. Conntrack uses a hash table to track the state of network connections.

Fields

For a description of each field in the metricset, see the exported fields section.

Here is an example document generated by this metricset:

{
    "@timestamp": "2017-10-12T08:05:34.853Z",
    "event": {
        "dataset": "linux.conntrack",
        "duration": 115000,
        "module": "linux"
    },
    "linux": {
        "conntrack": {
            "summary": {
                "drop": 0,
                "early_drop": 0,
                "entries": 16,
                "found": 0,
                "ignore": 3271028,
                "insert_failed": 0,
                "invalid": 122,
                "search_restart": 3
            }
        }
    },
    "metricset": {
        "name": "conntrack",
        "period": 10000
    },
    "service": {
        "type": "linux"
    }
}