Protocol-Specific Metrics | Packetbeat Reference [8.13] | Elastic

› › ›

« Configure an HTTP endpoint for metrics Configure APM instrumentation »

Protocol-Specific Metricsedit

Packetbeat exposes per-protocol metrics under the HTTP monitoring endpoint. These metrics are exposed under the /inputs path. They can be used to observe the activity of Packetbeat for the monitored protocol.

AF_PACKET Metricsedit

Metric	Description
`device`	Name of the device being monitored.
`socket_packets`	Number of packets delivered by the kernel to the shared buffer.
`socket_drops`	Number of packets dropped by the kernel on the socket.
`socket_queue_freezes`	Number of kernel queue freezes on the socket.
`packets`	Number of packets handled by Packetbeat.
`polls`	Number of blocking syscalls made waiting for packets.

TCP Metricsedit

Metric	Description
`device`	Name of the device being monitored.
`received_events_total`	Number of packets processed.
`received_bytes_total`	Number of bytes processed.
`tcp_overlaps`	Number of packets shrunk due to overlap.
`tcp.dropped_because_of_gaps`	Number of packets dropped because of gaps.
`arrival_period`	Histogram of the elapsed time between packet arrivals.
`processing_time`	Histogram of the elapsed time between packet receipt and publication.
`fin_flags_total`	Number of TCP FIN (finish) flags observed.
`syn_flags_total`	Number of TCP SYN (synchronization) flags observed.
`rst_flags_total`	Number of TCP RST (reset) flags observed.
`psh_flags_total`	Number of TCP PSH (push) flags observed.
`ack_flags_total`	Number of TCP ACK (acknowledgement) flags observed.
`urg_flags_total`	Number of TCP URG (urgent) flags observed.
`ece_flags_total`	Number of TCP ECE (ECN echo) flags observed.
`cwr_flags_total`	Number of TCP CWR (congestion window reduced) flags observed.
`ns_flags_total`	Number of TCP NS (nonce sum) flags observed.
`received_headers_total`	Number of headers observed, including unprocessed packets.

UDP Metricsedit

Metric	Description
`device`	Name of the device being monitored.
`received_events_total`	Number of packets processed.
`received_bytes_total`	Number of bytes processed.
`arrival_period`	Histogram of the elapsed time between packet arrivals.
`processing_time`	Histogram of the elapsed time between packet receipt and publication.

« Configure an HTTP endpoint for metrics Configure APM instrumentation »