Appendix E: Metricbeat anomaly detection configurationsedit

These anomaly detection job wizards appear in Kibana if you use the Metricbeat system module to monitor your servers. For more details, see the datafeed and job definitions in GitHub.

Metricbeat systemedit

Detect anomalies in Metricbeat System data (ECS).

These configurations are only available if data exists that matches the recognizer query specified in the manifest file.

Name Description Job Datafeed

high_mean_cpu_iowait_ecs

Detect unusual increases in cpu time spent in iowait (ECS)

A link icon

A link icon

max_disk_utilization_ecs

Detect unusual increases in disk utilization (ECS)

A link icon

A link icon

metricbeat_outages_ecs

Detect unusual decreases in metricbeat documents (ECS)

A link icon

A link icon