This documentation contains work-in-progress information for future Elastic Stack and Cloud releases. Use the version selector to view supported release docs. It also contains some Elastic Cloud serverless information. Check out our serverless docs for more details.

« Configure an HTTP endpoint for metrics Configure APM instrumentation »

› › ›

Protocol-Specific Metrics

edit

Protocol-Specific Metrics

edit

Packetbeat exposes per-protocol metrics under the HTTP monitoring endpoint. These metrics are exposed under the /inputs/ path. They can be used to observe the activity of Packetbeat for the monitored protocol.

AF_PACKET Metrics

edit

Metric	Description
`device`	Name of the device being monitored.
`socket_packets`	Number of packets delivered by the kernel to the shared buffer.
`socket_drops`	Number of packets dropped by the kernel on the socket.
`socket_queue_freezes`	Number of kernel queue freezes on the socket.
`packets`	Number of packets handled by Packetbeat.
`polls`	Number of blocking syscalls made waiting for packets.

TCP Metrics

edit

Metric	Description
`device`	Name of the device being monitored.
`received_events_total`	Number of packets processed.
`received_bytes_total`	Number of bytes processed.
`tcp_overlaps`	Number of packets shrunk due to overlap.
`tcp.dropped_because_of_gaps`	Number of packets dropped because of gaps.
`arrival_period`	Histogram of the elapsed time between packet arrivals.
`processing_time`	Histogram of the elapsed time between packet receipt and publication.
`fin_flags_total`	Number of TCP FIN (finish) flags observed.
`syn_flags_total`	Number of TCP SYN (synchronization) flags observed.
`rst_flags_total`	Number of TCP RST (reset) flags observed.
`psh_flags_total`	Number of TCP PSH (push) flags observed.
`ack_flags_total`	Number of TCP ACK (acknowledgement) flags observed.
`urg_flags_total`	Number of TCP URG (urgent) flags observed.
`ece_flags_total`	Number of TCP ECE (ECN echo) flags observed.
`cwr_flags_total`	Number of TCP CWR (congestion window reduced) flags observed.
`ns_flags_total`	Number of TCP NS (nonce sum) flags observed.
`received_headers_total`	Number of headers observed, including unprocessed packets.

UDP Metrics

edit

Metric	Description
`device`	Name of the device being monitored.
`received_events_total`	Number of packets processed.
`received_bytes_total`	Number of bytes processed.
`arrival_period`	Histogram of the elapsed time between packet arrivals.
`processing_time`	Histogram of the elapsed time between packet receipt and publication.

« Configure an HTTP endpoint for metrics Configure APM instrumentation »