Type to search.

Protocol-Specific Metrics

Serverless

Elastic Cloud Serverless projects are autoscaled environments, fully managed by Elastic and available on Elastic Cloud.

Availability

  • Generally available

    This functionality is generally available and ready for production usage.

Serverless interfaces and procedures might differ from classic Elastic Stack deployments.

Stack

The Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats.

Availability

  • Generally available

    This functionality is generally available and ready for production usage.

Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments.

This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.

Packetbeat exposes per-protocol metrics under the HTTP monitoring endpoint. These metrics are exposed under the /inputs/ path. They can be used to observe the activity of Packetbeat for the monitored protocol.

AF_PACKET Metrics

Metric Description
device Name of the device being monitored.
socket_packets Number of packets delivered by the kernel to the shared buffer.
socket_drops Number of packets dropped by the kernel on the socket.
socket_queue_freezes Number of kernel queue freezes on the socket.
packets Number of packets handled by Packetbeat.
polls Number of blocking syscalls made waiting for packets.

TCP Metrics

Metric Description
device Name of the device being monitored.
received_events_total Number of packets processed.
received_bytes_total Number of bytes processed.
tcp_overlaps Number of packets shrunk due to overlap.
tcp.dropped_because_of_gaps Number of packets dropped because of gaps.
arrival_period Histogram of the elapsed time between packet arrivals.
processing_time Histogram of the elapsed time between packet receipt and publication.
fin_flags_total Number of TCP FIN (finish) flags observed.
syn_flags_total Number of TCP SYN (synchronization) flags observed.
rst_flags_total Number of TCP RST (reset) flags observed.
psh_flags_total Number of TCP PSH (push) flags observed.
ack_flags_total Number of TCP ACK (acknowledgement) flags observed.
urg_flags_total Number of TCP URG (urgent) flags observed.
ece_flags_total Number of TCP ECE (ECN echo) flags observed.
cwr_flags_total Number of TCP CWR (congestion window reduced) flags observed.
ns_flags_total Number of TCP NS (nonce sum) flags observed.
received_headers_total Number of headers observed, including unprocessed packets.

UDP Metrics

Metric Description
device Name of the device being monitored.
received_events_total Number of packets processed.
received_bytes_total Number of bytes processed.
arrival_period Histogram of the elapsed time between packet arrivals.
processing_time Histogram of the elapsed time between packet receipt and publication.