Elasticsearch Module

• About the elasticsearch metricbeat module
• List of exported fields stored by this module generated from fields.yml files

Metricsets

Metricbeat will call the following Elasticsearch API endpoints corresponding to each metricset. The module stores a subset of the response in fields which can be found here. The Metricbeat exported fields generally follow the same paths as the elasticsearch API response, but may differ somewhat according to the schema in each metricset. They are namespaced with {module}.{metricset}.

ccr

• /_ccr/stats
• api reference
• mb exported fields

cluster_stats

• /_cluster/stats
• api reference
• mb exported fields

enrich

• /_enrich/_stats
• api reference
• mb exported fields

index

• /_stats/docs,fielddata,indexing,merge,search,segments,store,refresh,query_cache,request_cache?filter_path=indices&expandWildcards=open
• api reference
• mb exported fields

index_recovery

• /_recovery?active_only=true
• active_only value from index_recovery.active_only setting
• api reference
• mb exported fields

index_summary

• /_stats?level=cluster
• api reference
• mb exported fields

ml_job

• /_ml/anomaly_detectors/_all/_stats
• api reference
• mb exported fields

node

• /_nodes/_local
• api reference
• mb exported fields

node_stats

• /_nodes/{_local|_all}/stats/jvm,indices,fs,os,process,transport,thread_pool,indexing_pressure,ingest/bulk,docs,get,merge,translog,fielddata,indexing,query_cache,request_cache,search,shard_stats,store,segments,refresh,flush
• _local | _all from scope setting
• api reference
• mb exported fields

pending_tasks

• /_cluster/pending_tasks
• api reference
• mb exported fields

shard

• /_cluster/state/version,nodes,master_node,routing_table
• api reference
• mb exported fields