Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Filebeat] udp input metrics - indicate when system_packet_drops is unavailable #41130

Open
andrewkroh opened this issue Oct 4, 2024 · 1 comment
Labels
enhancement Filebeat Filebeat Team:Security-Deployment and Devices Deployment and Devices Team in Security Solution

Comments

@andrewkroh
Copy link
Member

andrewkroh commented Oct 4, 2024

Describe the enhancement:

For the UDP input metrics, make it clear when the data is invalid. The availability of these two metrics depends on the host:

  • system_packet_drops
  • receive_queue_length

My suggestion is to report the values as -1 at initialization or after any error.

Describe a specific use case for the enhancement or feature:

A system_packet_drops value of 0 is a indicator of health, but if zero is being reported because of a collection failure (or because we are on Windows), then we have a false sense of the current state. When troubleshooting I need to know if the metric is valid.

References

@andrewkroh andrewkroh added enhancement Filebeat Filebeat Team:Security-Deployment and Devices Deployment and Devices Team in Security Solution labels Oct 4, 2024
@elasticmachine
Copy link
Collaborator

Pinging @elastic/sec-deployment-and-devices (Team:Security-Deployment and Devices)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement Filebeat Filebeat Team:Security-Deployment and Devices Deployment and Devices Team in Security Solution
Projects
None yet
Development

No branches or pull requests

2 participants