Appendix E: Metricbeat anomaly detection configurations

These anomaly detection job wizards appear in Kibana if you use the Metricbeat system module to monitor your servers. For more details, see the datafeed and job definitions in GitHub.

Metricbeat system

edit

Detect anomalies in Metricbeat System data (ECS).

These configurations are only available if data exists that matches the recognizer query specified in the manifest file.

Name	Description	Job	Datafeed
high_mean_cpu_iowait_ecs	Detect unusual increases in cpu time spent in iowait (ECS)
max_disk_utilization_ecs	Detect unusual increases in disk utilization (ECS)
metricbeat_outages_ecs	Detect unusual decreases in metricbeat documents (ECS)

« Appendix D: Logs anomaly detection configurations Appendix F: Metrics anomaly detection configurations »