System filesystem metricset

The System filesystem metricset provides file system statistics. For each file system, one document is provided.

This metricset is available on:

filesystem.ignore_types - A list of filesystem types to ignore. Metrics will not be collected from filesystems matching these types. This setting also affects the fsstats metricset.

Often there are mounted filesystems that you do not want Metricbeat to report metrics on. One option is to configure Metricbeat to ignore specific filesystem types. This can be accomplished by configuring filesystem.ignore_types with a list of filesystem types to ignore. In this example we are ignoring three types of filesystems.

metricbeat.modules:
  - module: system
    period: 30s
    metricsets: ["filesystem"]
    filesystem.ignore_types: [nfs, smbfs, autofs]

Another strategy to deal with these filesystems is to configure a drop_event processor that matches the mount_point using a regular expression. This type of filtering occurs after the data has been collected so it can be less efficient than the previous method.

metricbeat.modules:
  - module: system
    period: 30s
    metricsets: ["filesystem"]
    processors:
    - drop_event.when.regexp:
        system.filesystem.mount_point: '^/(sys|cgroup|proc|dev|etc|host)($|/)'

{
    "@timestamp": "2017-10-12T08:05:34.853Z",
    "beat": {
        "hostname": "host.example.com",
        "name": "host.example.com"
    },
    "metricset": {
        "module": "system",
        "name": "filesystem",
        "rtt": 115
    },
    "system": {
        "filesystem": {
            "available": 60083531776,
            "device_name": "/dev/disk1",
            "files": 4294967279,
            "free": 60345675776,
            "free_files": 4291998784,
            "mount_point": "/",
            "total": 249779191808,
            "type": "hfs",
            "used": {
                "bytes": 189433516032,
                "pct": 0.7584
            }
        }
    }
}