-
-
Save StevenOchsCGI/818ec77a7f1ca3c01b4bbbed23629539 to your computer and use it in GitHub Desktop.
Full Debug Metricbeat Log
This file has been truncated, but you can view the full file.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2018.06.19 10:47:51 =~=~=~=~=~=~=~=~=~=~=~= | |
]0;root@lin-play-02:/etc/metricbeatlin-play-02>root>>/etc/metricbeat>> | |
]0;root@lin-play-02:/etc/metricbeatlin-play-02>root>>/etc/metricbeat>>metricbeat -e -d "*" | |
2018-06-19T10:48:18.232-0700 INFO instance/beat.go:468 Home path: [/usr/share/metricbeat] Config path: [/etc/metricbeat] Data path: [/var/lib/metricbeat] Logs path: [/var/log/metricbeat] | |
2018-06-19T10:48:18.232-0700 DEBUG [beat] instance/beat.go:495 Beat metadata path: /var/lib/metricbeat/meta.json | |
2018-06-19T10:48:18.232-0700 INFO instance/beat.go:475 Beat UUID: c333adf1-4565-43e3-940a-1ae5654b8e8e | |
2018-06-19T10:48:18.232-0700 INFO instance/beat.go:213 Setup Beat: metricbeat; Version: 6.2.4 | |
2018-06-19T10:48:18.232-0700 DEBUG [beat] instance/beat.go:230 Initializing output plugins | |
2018-06-19T10:48:18.232-0700 DEBUG [processors] processors/processor.go:49 Processors: | |
2018-06-19T10:48:18.233-0700 INFO pipeline/module.go:76 Beat name: lin-play-02 | |
2018-06-19T10:48:18.234-0700 DEBUG [modules] beater/metricbeat.go:80 Register [ModuleFactory:[docker, mongodb, mysql, postgresql, system, uwsgi], MetricSetFactory:[aerospike/namespace, apache/status, ceph/cluster_disk, ceph/cluster_health, ceph/cluster_status, ceph/monitor_health, ceph/osd_df, ceph/osd_tree, ceph/pool_disk, couchbase/bucket, couchbase/cluster, couchbase/node, docker/container, docker/cpu, docker/diskio, docker/healthcheck, docker/image, docker/info, docker/memory, docker/network, dropwizard/collector, elasticsearch/node, elasticsearch/node_stats, etcd/leader, etcd/self, etcd/store, golang/expvar, golang/heap, graphite/server, haproxy/info, haproxy/stat, http/json, http/server, jolokia/jmx, kafka/consumergroup, kafka/partition, kibana/status, kubernetes/container, kubernetes/event, kubernetes/node, kubernetes/pod, kubernetes/state_container, kubernetes/state_deployment, kubernetes/state_node, kubernetes/state_pod, kubernetes/state_replicaset, kubernetes/system, kubernetes/volume, logstash/node, logstash/node_stats, memcached/stats, mongodb/collstats, mongodb/dbstats, mongodb/status, mysql/status, nginx/stubstatus, php_fpm/pool, postgresql/activity, postgresql/bgwriter, postgresql/database, prometheus/collector, prometheus/stats, rabbitmq/node, rabbitmq/queue, redis/info, redis/keyspace, system/core, system/cpu, system/diskio, system/filesystem, system/fsstat, system/load, system/memory, system/network, system/process, system/process_summary, system/raid, system/socket, system/uptime, uwsgi/status, vsphere/datastore, vsphere/host, vsphere/virtualmachine, zookeeper/mntr]] | |
2018-06-19T10:48:18.234-0700 INFO [monitoring] log/log.go:97 Starting metrics logging every 30s | |
2018-06-19T10:48:18.234-0700 INFO instance/beat.go:301 metricbeat start running. | |
2018-06-19T10:48:18.234-0700 DEBUG [cfgfile] cfgfile/reload.go:95 Checking module configs from: /etc/metricbeat/modules.d/*.yml | |
2018-06-19T10:48:18.234-0700 DEBUG [cfgfile] cfgfile/cfgfile.go:143 Load config from file: /etc/metricbeat/modules.d/system.yml | |
2018-06-19T10:48:18.235-0700 DEBUG [cfgfile] cfgfile/reload.go:109 Number of module configs found: 3 | |
2018-06-19T10:48:18.235-0700 DEBUG [processors] processors/processor.go:49 Processors: | |
2018-06-19T10:48:18.235-0700 DEBUG [system.process] process/process.go:65 process cgroup data collection is enabled, using hostfs='' | |
2018-06-19T10:48:18.236-0700 DEBUG [processors] processors/condition.go:97 New condition regexp: map[system.filesystem.mount_point:\A/(?:sys|cgroup|proc|dev|etc|host|lib)(?:(?-m:$)|/)] | |
2018-06-19T10:48:18.236-0700 DEBUG [processors] processors/processor.go:49 Processors: drop_event, condition=regexp: map[system.filesystem.mount_point:\A/(?:sys|cgroup|proc|dev|etc|host|lib)(?:(?-m:$)|/)] | |
2018-06-19T10:48:18.236-0700 DEBUG [processors] processors/processor.go:49 Processors: | |
2018-06-19T10:48:18.236-0700 INFO cfgfile/reload.go:127 Config reloader started | |
2018-06-19T10:48:18.236-0700 DEBUG [cfgfile] cfgfile/reload.go:151 Scan for new config files | |
2018-06-19T10:48:18.237-0700 DEBUG [cfgfile] cfgfile/cfgfile.go:143 Load config from file: /etc/metricbeat/modules.d/system.yml | |
2018-06-19T10:48:18.237-0700 DEBUG [cfgfile] cfgfile/reload.go:170 Number of module configs found: 3 | |
2018-06-19T10:48:18.237-0700 DEBUG [cfgfile] cfgfile/reload.go:198 Remove module from stoplist: 1283936486514163240 | |
2018-06-19T10:48:18.237-0700 DEBUG [cfgfile] cfgfile/reload.go:203 Add module to startlist: 1283936486514163240 | |
2018-06-19T10:48:18.237-0700 DEBUG [processors] processors/processor.go:49 Processors: | |
2018-06-19T10:48:18.237-0700 DEBUG [system.process] process/process.go:65 process cgroup data collection is enabled, using hostfs='' | |
2018-06-19T10:48:18.238-0700 DEBUG [cfgfile] cfgfile/reload.go:198 Remove module from stoplist: 6259003571077527891 | |
2018-06-19T10:48:18.238-0700 DEBUG [cfgfile] cfgfile/reload.go:203 Add module to startlist: 6259003571077527891 | |
2018-06-19T10:48:18.238-0700 DEBUG [processors] processors/condition.go:97 New condition regexp: map[system.filesystem.mount_point:\A/(?:sys|cgroup|proc|dev|etc|host|lib)(?:(?-m:$)|/)] | |
2018-06-19T10:48:18.238-0700 DEBUG [processors] processors/processor.go:49 Processors: drop_event, condition=regexp: map[system.filesystem.mount_point:\A/(?:sys|cgroup|proc|dev|etc|host|lib)(?:(?-m:$)|/)] | |
2018-06-19T10:48:18.238-0700 DEBUG [cfgfile] cfgfile/reload.go:198 Remove module from stoplist: 8560891566631850026 | |
2018-06-19T10:48:18.238-0700 DEBUG [cfgfile] cfgfile/reload.go:203 Add module to startlist: 8560891566631850026 | |
2018-06-19T10:48:18.238-0700 DEBUG [processors] processors/processor.go:49 Processors: | |
2018-06-19T10:48:18.239-0700 INFO cfgfile/reload.go:258 Starting 3 runners ... | |
2018-06-19T10:48:18.239-0700 DEBUG [module] module/wrapper.go:100 Starting Wrapper[name=system, len(metricSetWrappers)=1] | |
2018-06-19T10:48:18.239-0700 DEBUG [cfgfile] cfgfile/reload.go:265 New runner started: 8560891566631850026 | |
2018-06-19T10:48:18.239-0700 DEBUG [module] module/wrapper.go:100 Starting Wrapper[name=system, len(metricSetWrappers)=6] | |
2018-06-19T10:48:18.239-0700 DEBUG [module] module/wrapper.go:154 Starting metricSetWrapper[module=system, name=uptime, host=] | |
2018-06-19T10:48:18.239-0700 DEBUG [cfgfile] cfgfile/reload.go:265 New runner started: 1283936486514163240 | |
2018-06-19T10:48:18.239-0700 DEBUG [module] module/wrapper.go:100 Starting Wrapper[name=system, len(metricSetWrappers)=2] | |
2018-06-19T10:48:18.239-0700 DEBUG [cfgfile] cfgfile/reload.go:265 New runner started: 6259003571077527891 | |
2018-06-19T10:48:18.239-0700 DEBUG [module] module/wrapper.go:154 Starting metricSetWrapper[module=system, name=memory, host=] | |
2018-06-19T10:48:18.239-0700 INFO cfgfile/reload.go:219 Loading of config files completed. | |
2018-06-19T10:48:18.239-0700 DEBUG [module] module/wrapper.go:154 Starting metricSetWrapper[module=system, name=process_summary, host=] | |
2018-06-19T10:48:18.239-0700 DEBUG [module] module/wrapper.go:154 Starting metricSetWrapper[module=system, name=cpu, host=] | |
2018-06-19T10:48:18.239-0700 DEBUG [module] module/wrapper.go:154 Starting metricSetWrapper[module=system, name=filesystem, host=] | |
2018-06-19T10:48:18.239-0700 DEBUG [module] module/wrapper.go:154 Starting metricSetWrapper[module=system, name=network, host=] | |
2018-06-19T10:48:18.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 130 | |
}, | |
"system": { | |
"cpu": { | |
"system": { | |
"pct": 0 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0 | |
}, | |
"cores": 4, | |
"idle": { | |
"pct": 0 | |
}, | |
"nice": { | |
"pct": 0 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:48:18.240-0700 DEBUG [module] module/wrapper.go:154 Starting metricSetWrapper[module=system, name=load, host=] | |
2018-06-19T10:48:18.240-0700 DEBUG [module] module/wrapper.go:154 Starting metricSetWrapper[module=system, name=fsstat, host=] | |
2018-06-19T10:48:18.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 580, | |
"name": "filesystem", | |
"module": "system" | |
}, | |
"system": { | |
"filesystem": { | |
"files": 18317312, | |
"free": 12062515200, | |
"free_files": 18077679, | |
"used": { | |
"pct": 0.3565, | |
"bytes": 6683926528 | |
}, | |
"available": 12062515200, | |
"type": "rootfs", | |
"device_name": "rootfs", | |
"mount_point": "/", | |
"total": 18746441728 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:18.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 36, | |
"name": "uptime" | |
}, | |
"system": { | |
"uptime": { | |
"duration": { | |
"ms": 584368000 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:18.240-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: / total=18746441728, used=6683926528, free=12062515200 | |
2018-06-19T10:48:18.240-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys total=0, used=0, free=0 | |
2018-06-19T10:48:18.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"filesystem": { | |
"total": 4101361664, | |
"available": 4024926208, | |
"free_files": 1000766, | |
"type": "tmpfs", | |
"device_name": "tmpfs", | |
"free": 4024926208, | |
"used": { | |
"bytes": 76435456, | |
"pct": 0.0186 | |
}, | |
"mount_point": "/run", | |
"files": 1001309 | |
} | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 1006, | |
"name": "filesystem" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:18.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 331 | |
}, | |
"system": { | |
"memory": { | |
"actual": { | |
"free": 7295188992, | |
"used": { | |
"pct": 0.1106, | |
"bytes": 907538432 | |
} | |
}, | |
"swap": { | |
"free": 2147479552, | |
"total": 2147479552, | |
"used": { | |
"pct": 0, | |
"bytes": 0 | |
} | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1798144000, | |
"pct": 0.2192 | |
}, | |
"free": 6404583424 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:18.240-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc total=0, used=0, free=0 | |
2018-06-19T10:48:18.241-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev total=4084723712, used=0, free=4084723712 | |
2018-06-19T10:48:18.241-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 235 | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8797612361, | |
"packets": 33937055 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13603280, | |
"bytes": 1539269155 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:48:18.241-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"load": { | |
"5": 0.01, | |
"15": 0.05, | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
}, | |
"cores": 4, | |
"1": 0 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 86 | |
} | |
} | |
2018-06-19T10:48:18.241-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 410 | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"packets": 1706792, | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6591650786 | |
}, | |
"out": { | |
"bytes": 6591650786, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1706792 | |
} | |
} | |
} | |
} | |
2018-06-19T10:48:18.241-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/security total=0, used=0, free=0 | |
2018-06-19T10:48:18.241-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/shm total=4101361664, used=81920, free=4101279744 | |
2018-06-19T10:48:18.241-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 1511 | |
}, | |
"system": { | |
"filesystem": { | |
"total": 18746441728, | |
"used": { | |
"pct": 0.3565, | |
"bytes": 6683926528 | |
}, | |
"free_files": 18077679, | |
"device_name": "/dev/mapper/rhel-root", | |
"type": "xfs", | |
"free": 12062515200, | |
"available": 12062515200, | |
"files": 18317312, | |
"mount_point": "/" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:18.241-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"name": "virbr0-nic" | |
} | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 1820, | |
"name": "network" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:18.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 1829 | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
}, | |
"name": "virbr0" | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:48:18.239-0700 DEBUG [module] module/wrapper.go:154 Starting metricSetWrapper[module=system, name=process, host=] | |
2018-06-19T10:48:18.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"filesystem": { | |
"device_name": "/dev/sda1", | |
"total": 520794112, | |
"files": 512000, | |
"free_files": 511656, | |
"mount_point": "/boot", | |
"free": 239128576, | |
"type": "xfs", | |
"available": 239128576, | |
"used": { | |
"bytes": 281665536, | |
"pct": 0.5408 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 2541 | |
} | |
} | |
2018-06-19T10:48:18.241-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/pts total=0, used=0, free=0 | |
2018-06-19T10:48:18.243-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run total=4101361664, used=76435456, free=4024926208 | |
2018-06-19T10:48:18.243-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup total=4101361664, used=0, free=4101361664 | |
2018-06-19T10:48:18.243-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/systemd total=0, used=0, free=0 | |
2018-06-19T10:48:18.243-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/pstore total=0, used=0, free=0 | |
2018-06-19T10:48:18.243-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/perf_event total=0, used=0, free=0 | |
2018-06-19T10:48:18.243-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/freezer total=0, used=0, free=0 | |
2018-06-19T10:48:18.244-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/memory total=0, used=0, free=0 | |
2018-06-19T10:48:18.244-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/pids total=0, used=0, free=0 | |
2018-06-19T10:48:18.244-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/cpu,cpuacct total=0, used=0, free=0 | |
2018-06-19T10:48:18.244-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/blkio total=0, used=0, free=0 | |
2018-06-19T10:48:18.244-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/net_cls,net_prio total=0, used=0, free=0 | |
2018-06-19T10:48:18.244-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/devices total=0, used=0, free=0 | |
2018-06-19T10:48:18.244-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/hugetlb total=0, used=0, free=0 | |
2018-06-19T10:48:18.244-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/cpuset total=0, used=0, free=0 | |
2018-06-19T10:48:18.244-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/config total=0, used=0, free=0 | |
2018-06-19T10:48:18.244-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: / total=18746441728, used=6683926528, free=12062515200 | |
2018-06-19T10:48:18.244-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/sys/fs/binfmt_misc total=0, used=0, free=0 | |
2018-06-19T10:48:18.244-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/mqueue total=0, used=0, free=0 | |
2018-06-19T10:48:18.244-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/hugepages total=0, used=0, free=0 | |
2018-06-19T10:48:18.244-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/debug total=0, used=0, free=0 | |
2018-06-19T10:48:18.244-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/fs/nfsd total=0, used=0, free=0 | |
2018-06-19T10:48:18.244-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /boot total=520794112, used=281665536, free=239128576 | |
2018-06-19T10:48:18.244-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /var/lib/nfs/rpc_pipefs total=0, used=0, free=0 | |
2018-06-19T10:48:18.244-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/sys/fs/binfmt_misc total=0, used=0, free=0 | |
2018-06-19T10:48:18.244-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run/user/42 total=820273152, used=12288, free=820260864 | |
2018-06-19T10:48:18.244-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run/user/0 total=820273152, used=0, free=820273152 | |
2018-06-19T10:48:18.243-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 2566, | |
"name": "filesystem" | |
}, | |
"system": { | |
"filesystem": { | |
"free": 0, | |
"files": 0, | |
"free_files": 0, | |
"used": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"device_name": "sunrpc", | |
"type": "rpc_pipefs", | |
"available": 0, | |
"total": 0, | |
"mount_point": "/var/lib/nfs/rpc_pipefs" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:18.245-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 3970 | |
}, | |
"system": { | |
"filesystem": { | |
"device_name": "tmpfs", | |
"free": 820260864, | |
"free_files": 1001300, | |
"used": { | |
"bytes": 12288, | |
"pct": 0 | |
}, | |
"type": "tmpfs", | |
"total": 820273152, | |
"available": 820260864, | |
"files": 1001309, | |
"mount_point": "/run/user/42" | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:48:18.245-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "fsstat", | |
"module": "system", | |
"rtt": 4488 | |
}, | |
"system": { | |
"fsstat": { | |
"total_size": { | |
"used": 7042121728, | |
"total": 37296590848, | |
"free": 30254469120 | |
}, | |
"count": 31, | |
"total_files": 24833104 | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:48:18.245-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 5831 | |
}, | |
"system": { | |
"filesystem": { | |
"mount_point": "/run/user/0", | |
"available": 820273152, | |
"files": 1001309, | |
"device_name": "tmpfs", | |
"total": 820273152, | |
"free": 820273152, | |
"free_files": 1001308, | |
"type": "tmpfs", | |
"used": { | |
"pct": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:48:18.279-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 40232, | |
"namespace": "system.process.summary", | |
"name": "process_summary", | |
"module": "system" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 191, | |
"sleeping": 191, | |
"running": 0 | |
} | |
} | |
} | |
} | |
2018-06-19T10:48:18.356-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 10 processes | |
2018-06-19T10:48:18.358-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 115634 | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"username": "root", | |
"pid": 1, | |
"ppid": 0, | |
"cmdline": "/usr/lib/systemd/systemd --switched-root --system --deserialize 21", | |
"fd": { | |
"open": 49, | |
"limit": { | |
"soft": 65536, | |
"hard": 65536 | |
} | |
}, | |
"pgid": 1, | |
"name": "systemd", | |
"memory": { | |
"size": 195588096, | |
"rss": { | |
"pct": 0.0005, | |
"bytes": 4194304 | |
}, | |
"share": 2605056 | |
}, | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 0, | |
"pct": 0 | |
}, | |
"start_time": "2018-06-12T23:28:51.000Z" | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:18.358-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 115668 | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 0, | |
"rss": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"share": 0 | |
}, | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 0 | |
}, | |
"start_time": "2018-06-12T23:28:51.000Z" | |
}, | |
"pid": 2, | |
"state": "sleeping", | |
"username": "root", | |
"name": "kthreadd", | |
"fd": { | |
"open": 0, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"ppid": 0, | |
"pgid": 0 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:18.358-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"memory": { | |
"size": 0, | |
"rss": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"share": 0 | |
}, | |
"username": "root", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 0, | |
"pct": 0 | |
}, | |
"start_time": "2018-06-12T23:28:51.000Z" | |
}, | |
"fd": { | |
"open": 0, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 2, | |
"pgid": 0, | |
"pid": 3, | |
"name": "ksoftirqd/0" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 115673 | |
} | |
} | |
2018-06-19T10:48:18.358-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"total": { | |
"value": 0, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:28:51.000Z" | |
}, | |
"memory": { | |
"size": 0, | |
"rss": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"share": 0 | |
}, | |
"pid": 5, | |
"ppid": 2, | |
"state": "sleeping", | |
"pgid": 0, | |
"username": "root", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 0 | |
}, | |
"name": "kworker/0:0H" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 116054, | |
"name": "process" | |
} | |
} | |
2018-06-19T10:48:18.358-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"pgid": 0, | |
"cpu": { | |
"start_time": "2018-06-12T23:28:51.000Z", | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 0 | |
} | |
}, | |
"ppid": 2, | |
"fd": { | |
"open": 0, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"state": "sleeping", | |
"username": "root", | |
"name": "migration/0", | |
"pid": 7, | |
"memory": { | |
"size": 0, | |
"rss": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"share": 0 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 116066 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:18.358-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 116294 | |
}, | |
"system": { | |
"process": { | |
"cmdline": "/usr/bin/gnome-shell", | |
"cwd": "/var/lib/gdm", | |
"cpu": { | |
"start_time": "2018-06-12T23:29:50.000Z", | |
"total": { | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 0, | |
"pct": 0 | |
} | |
}, | |
"pid": 1714, | |
"state": "sleeping", | |
"pgid": 1674, | |
"fd": { | |
"open": 36, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142860288, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"ppid": 1674, | |
"name": "gnome-shell", | |
"username": "gdm" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:18.358-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 116402 | |
}, | |
"system": { | |
"process": { | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136 | |
}, | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"username": "root", | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 0 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"pid": 1168, | |
"ppid": 1, | |
"state": "sleeping", | |
"cwd": "/", | |
"pgid": 1168, | |
"name": "python" | |
} | |
} | |
} | |
2018-06-19T10:48:18.359-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 116467 | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"rss": { | |
"bytes": 30425088, | |
"pct": 0.0037 | |
}, | |
"share": 14041088, | |
"size": 928202752 | |
}, | |
"cwd": "/", | |
"ppid": 1, | |
"name": "metricbeat", | |
"state": "sleeping", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"username": "root", | |
"pid": 6389, | |
"pgid": 6389, | |
"cpu": { | |
"total": { | |
"value": 0, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:18.359-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"pgid": 509, | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 0 | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"username": "root", | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 23920640, | |
"pct": 0.0029 | |
}, | |
"share": 23523328 | |
}, | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"state": "sleeping", | |
"pid": 509, | |
"ppid": 1, | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"name": "systemd-journal", | |
"cwd": "/" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 116694 | |
} | |
} | |
2018-06-19T10:48:18.359-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 116928 | |
}, | |
"system": { | |
"process": { | |
"username": "root", | |
"memory": { | |
"share": 13389824, | |
"size": 480337920, | |
"rss": { | |
"bytes": 22900736, | |
"pct": 0.0028 | |
} | |
}, | |
"cwd": "/etc/metricbeat", | |
"pgid": 28171, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"pid": 28171, | |
"fd": { | |
"open": 5, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 27887, | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 0 | |
}, | |
"start_time": "2018-06-19T17:48:18.000Z" | |
}, | |
"name": "metricbeat", | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:48:19.240-0700 DEBUG [logstash] logstash/async.go:94 connect | |
2018-06-19T10:48:19.245-0700 DEBUG [logstash] logstash/async.go:142 27 events out of 27 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:48:28.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:28.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"cpu": { | |
"system": { | |
"pct": 0.026 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.0511 | |
}, | |
"cores": 4, | |
"idle": { | |
"pct": 3.9489 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.024 | |
}, | |
"softirq": { | |
"pct": 0.001 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 273 | |
} | |
} | |
2018-06-19T10:48:28.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:28.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"memory": { | |
"actual": { | |
"used": { | |
"pct": 0.1106, | |
"bytes": 907091968 | |
}, | |
"free": 7295635456 | |
}, | |
"swap": { | |
"free": 2147479552, | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
} | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1797697536, | |
"pct": 0.2192 | |
}, | |
"free": 6405029888 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 331 | |
} | |
} | |
2018-06-19T10:48:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:28.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 101, | |
"name": "load", | |
"module": "system" | |
}, | |
"system": { | |
"load": { | |
"cores": 4, | |
"1": 0, | |
"5": 0.01, | |
"15": 0.05, | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
} | |
} | |
} | |
} | |
2018-06-19T10:48:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:28.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 238 | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"packets": 33937663, | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8797781686 | |
}, | |
"out": { | |
"packets": 13603553, | |
"bytes": 1539335536, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:48:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:28.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6591814409, | |
"packets": 1706851 | |
}, | |
"out": { | |
"packets": 1706851, | |
"bytes": 6591814409, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 250 | |
} | |
} | |
2018-06-19T10:48:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:28.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 256, | |
"name": "network", | |
"module": "system" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:28.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 724 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:48:28.328-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:28.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"namespace": "system.process.summary", | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 48402 | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"sleeping": 188, | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 188 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:28.468-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T10:48:28.470-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 110267 | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"cwd": "/etc/metricbeat", | |
"memory": { | |
"size": 481419264, | |
"rss": { | |
"bytes": 24084480, | |
"pct": 0.0029 | |
}, | |
"share": 13602816 | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"pgid": 28171, | |
"username": "root", | |
"pid": 28171, | |
"name": "metricbeat", | |
"cpu": { | |
"total": { | |
"value": 470, | |
"pct": 0.0198, | |
"norm": { | |
"pct": 0.0049 | |
} | |
}, | |
"start_time": "2018-06-19T17:48:18.000Z" | |
}, | |
"ppid": 27887, | |
"state": "running" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:48:28.470-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 110299, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"start_time": "2018-06-14T16:41:30.000Z", | |
"total": { | |
"norm": { | |
"pct": 0.0042 | |
}, | |
"value": 7.04526e+06, | |
"pct": 0.0168 | |
} | |
}, | |
"pid": 6389, | |
"pgid": 6389, | |
"username": "root", | |
"cwd": "/", | |
"state": "sleeping", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"memory": { | |
"size": 928202752, | |
"rss": { | |
"bytes": 30425088, | |
"pct": 0.0037 | |
}, | |
"share": 14041088 | |
}, | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 1, | |
"name": "metricbeat" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:28.470-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 110304, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"pid": 1168, | |
"ppid": 1, | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"username": "root", | |
"pgid": 1168, | |
"state": "sleeping", | |
"memory": { | |
"share": 11227136, | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
} | |
}, | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"value": 1.26754e+06, | |
"pct": 0.003, | |
"norm": { | |
"pct": 0.0007 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"name": "python" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:28.470-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 110721 | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 51286016, | |
"rss": { | |
"pct": 0.001, | |
"bytes": 8130560 | |
}, | |
"share": 2699264 | |
}, | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"pid": 1319, | |
"ppid": 1171, | |
"username": "xymon", | |
"state": "sleeping", | |
"pgid": 1171, | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
}, | |
"value": 690730 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"fd": { | |
"open": 4, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"name": "xymond" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:28.470-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 110878, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"ppid": 2, | |
"cpu": { | |
"total": { | |
"value": 10, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0002 | |
} | |
}, | |
"start_time": "2018-06-19T17:43:58.000Z" | |
}, | |
"pid": 27614, | |
"pgid": 0, | |
"fd": { | |
"open": 0, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"name": "kworker/2:2", | |
"state": "sleeping", | |
"username": "root", | |
"memory": { | |
"size": 0, | |
"rss": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"share": 0 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:48:28.470-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 111002 | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142860288, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"cpu": { | |
"total": { | |
"value": 201470, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"pid": 1714, | |
"ppid": 1674, | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"username": "gdm", | |
"cwd": "/var/lib/gdm", | |
"name": "gnome-shell", | |
"state": "sleeping", | |
"cmdline": "/usr/bin/gnome-shell", | |
"pgid": 1674 | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:48:28.470-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 111151, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"pid": 509, | |
"name": "systemd-journal", | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 45730 | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"pgid": 509, | |
"ppid": 1, | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"pct": 0.0029, | |
"bytes": 23920640 | |
}, | |
"share": 23523328 | |
}, | |
"username": "root" | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:48:29.243-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:48:38.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:38.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"cpu": { | |
"nice": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.025 | |
}, | |
"total": { | |
"pct": 0.0451 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"system": { | |
"pct": 0.02 | |
}, | |
"cores": 4, | |
"idle": { | |
"pct": 3.9549 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 206 | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:48:38.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:38.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"memory": { | |
"free": 6404890624, | |
"actual": { | |
"used": { | |
"pct": 0.1106, | |
"bytes": 907231232 | |
}, | |
"free": 7295496192 | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1797836800, | |
"pct": 0.2192 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 315, | |
"name": "memory" | |
} | |
} | |
2018-06-19T10:48:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:38.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 145 | |
}, | |
"system": { | |
"load": { | |
"norm": { | |
"5": 0.0025, | |
"15": 0.0125, | |
"1": 0 | |
}, | |
"cores": 4, | |
"1": 0, | |
"5": 0.01, | |
"15": 0.05 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:38.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 169, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8797911845, | |
"packets": 33937997 | |
}, | |
"out": { | |
"packets": 13603628, | |
"bytes": 1539362662, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"name": "ens192" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:38.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 178 | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6591896828, | |
"packets": 1706865 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1706865, | |
"bytes": 6591896828 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:38.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 182 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:38.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 451 | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0 | |
}, | |
"name": "virbr0", | |
"in": { | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:38.314-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:38.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 188, | |
"sleeping": 188, | |
"running": 0, | |
"idle": 0 | |
} | |
} | |
}, | |
"metricset": { | |
"rtt": 34267, | |
"namespace": "system.process.summary", | |
"name": "process_summary", | |
"module": "system" | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:48:38.454-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T10:48:38.456-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 96613, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"cwd": "/", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 6 | |
}, | |
"username": "root", | |
"memory": { | |
"share": 14041088, | |
"size": 928202752, | |
"rss": { | |
"bytes": 30425088, | |
"pct": 0.0037 | |
} | |
}, | |
"pid": 6389, | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"pct": 0.018, | |
"norm": { | |
"pct": 0.0045 | |
}, | |
"value": 7.04544e+06 | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
}, | |
"pgid": 6389, | |
"name": "metricbeat", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"ppid": 1 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:38.456-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 96641 | |
}, | |
"system": { | |
"process": { | |
"pid": 28171, | |
"ppid": 27887, | |
"pgid": 28171, | |
"state": "sleeping", | |
"memory": { | |
"rss": { | |
"bytes": 25149440, | |
"pct": 0.0031 | |
}, | |
"share": 13615104, | |
"size": 490897408 | |
}, | |
"cpu": { | |
"total": { | |
"value": 640, | |
"pct": 0.017, | |
"norm": { | |
"pct": 0.0043 | |
} | |
}, | |
"start_time": "2018-06-19T17:48:18.000Z" | |
}, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 6 | |
}, | |
"name": "metricbeat", | |
"username": "root", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"cwd": "/etc/metricbeat" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:38.456-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 96647 | |
}, | |
"system": { | |
"process": { | |
"cwd": "/proc", | |
"name": "rtkit-daemon", | |
"state": "sleeping", | |
"username": "rtkit", | |
"memory": { | |
"share": 1073152, | |
"size": 168607744, | |
"rss": { | |
"bytes": 1277952, | |
"pct": 0.0002 | |
} | |
}, | |
"cmdline": "/usr/libexec/rtkit-daemon", | |
"fd": { | |
"open": 7, | |
"limit": { | |
"soft": 50, | |
"hard": 50 | |
} | |
}, | |
"cpu": { | |
"start_time": "2018-06-12T23:29:12.000Z", | |
"total": { | |
"norm": { | |
"pct": 0.0003 | |
}, | |
"value": 6060, | |
"pct": 0.001 | |
} | |
}, | |
"pgid": 701, | |
"pid": 701, | |
"ppid": 1 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:38.456-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 96991, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"pid": 1319, | |
"name": "xymond", | |
"state": "sleeping", | |
"fd": { | |
"open": 4, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"username": "xymon", | |
"memory": { | |
"size": 51286016, | |
"rss": { | |
"bytes": 8130560, | |
"pct": 0.001 | |
}, | |
"share": 2699264 | |
}, | |
"pgid": 1171, | |
"cwd": "/", | |
"ppid": 1171, | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0003 | |
}, | |
"value": 690740, | |
"pct": 0.001 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:38.456-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 97144 | |
}, | |
"system": { | |
"process": { | |
"ppid": 1, | |
"name": "python", | |
"state": "sleeping", | |
"pgid": 1168, | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 11 | |
}, | |
"cwd": "/", | |
"cpu": { | |
"start_time": "2018-06-12T23:29:34.000Z", | |
"total": { | |
"norm": { | |
"pct": 0.0003 | |
}, | |
"value": 1.26755e+06, | |
"pct": 0.001 | |
} | |
}, | |
"pid": 1168, | |
"username": "root", | |
"memory": { | |
"share": 11227136, | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:38.457-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 97282 | |
}, | |
"system": { | |
"process": { | |
"cmdline": "/usr/bin/gnome-shell", | |
"cpu": { | |
"total": { | |
"value": 201470, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"fd": { | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
}, | |
"open": 36 | |
}, | |
"ppid": 1674, | |
"username": "gdm", | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142860288, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"state": "sleeping", | |
"pid": 1714, | |
"name": "gnome-shell", | |
"cwd": "/var/lib/gdm", | |
"pgid": 1674 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:38.457-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 97399, | |
"name": "process", | |
"module": "system" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"rss": { | |
"bytes": 23920640, | |
"pct": 0.0029 | |
}, | |
"share": 23523328, | |
"size": 62988288 | |
}, | |
"ppid": 1, | |
"username": "root", | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"value": 45730, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"pid": 509, | |
"pgid": 509, | |
"name": "systemd-journal", | |
"state": "sleeping", | |
"fd": { | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
}, | |
"open": 52 | |
}, | |
"cmdline": "/usr/lib/systemd/systemd-journald" | |
} | |
} | |
} | |
2018-06-19T10:48:39.243-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:48:48.236-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":290,"time":294},"total":{"ticks":650,"time":658,"value":650},"user":{"ticks":360,"time":364}},"info":{"ephemeral_id":"b8779173-060a-43f9-be93-1ad877af938a","uptime":{"ms":30057}},"memstats":{"gc_next":7261904,"memory_alloc":3660536,"memory_total":51778928,"rss":25432064}},"libbeat":{"config":{"module":{"running":3,"starts":3},"reloads":1},"output":{"events":{"acked":57,"batches":3,"total":57},"read":{"bytes":18},"type":"logstash","write":{"bytes":7191}},"pipeline":{"clients":6,"events":{"active":0,"filtered":26,"published":57,"retry":27,"total":83},"queue":{"acked":57}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"filesystem":{"events":33,"success":33},"fsstat":{"events":1,"success":1},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":24,"success":24},"process_summary":{"events":3,"success":3},"uptime":{"events":1,"success":1}}},"system":{"cpu":{"cores":4},"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-19T10:48:48.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:48.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 197 | |
}, | |
"system": { | |
"cpu": { | |
"idle": { | |
"pct": 3.9619 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.023 | |
}, | |
"system": { | |
"pct": 0.015 | |
}, | |
"cores": 4, | |
"steal": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.0381 | |
} | |
} | |
} | |
} | |
2018-06-19T10:48:48.241-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:48.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 419 | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
}, | |
"system": { | |
"memory": { | |
"swap": { | |
"free": 2147479552, | |
"total": 2147479552, | |
"used": { | |
"pct": 0, | |
"bytes": 0 | |
} | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1798328320, | |
"pct": 0.2192 | |
}, | |
"free": 6404399104, | |
"actual": { | |
"used": { | |
"pct": 0.1107, | |
"bytes": 907722752 | |
}, | |
"free": 7295004672 | |
} | |
} | |
} | |
} | |
2018-06-19T10:48:48.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:48.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 135, | |
"name": "load" | |
}, | |
"system": { | |
"load": { | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
}, | |
"cores": 4, | |
"1": 0, | |
"5": 0.01, | |
"15": 0.05 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:48.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:48.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"packets": 13603664, | |
"bytes": 1539388586, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"name": "ens192", | |
"in": { | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8797930998, | |
"packets": 33938205 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 200 | |
} | |
} | |
2018-06-19T10:48:48.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:48.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 231, | |
"name": "network", | |
"module": "system" | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"bytes": 6591896828, | |
"packets": 1706865, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1706865, | |
"bytes": 6591896828 | |
}, | |
"name": "lo" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:48.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:48.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 238, | |
"name": "network", | |
"module": "system" | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
}, | |
"name": "virbr0-nic" | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:48:48.243-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:48.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 535, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0 | |
}, | |
"name": "virbr0" | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:48:48.312-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:48.279Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"namespace": "system.process.summary", | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 32153 | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"total": 188, | |
"sleeping": 188, | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:48.449-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T10:48:48.451-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 91231 | |
}, | |
"system": { | |
"process": { | |
"ppid": 1, | |
"name": "metricbeat", | |
"state": "sleeping", | |
"username": "root", | |
"memory": { | |
"size": 928202752, | |
"rss": { | |
"bytes": 30425088, | |
"pct": 0.0037 | |
}, | |
"share": 14041088 | |
}, | |
"pgid": 6389, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 6 | |
}, | |
"cwd": "/", | |
"pid": 6389, | |
"cpu": { | |
"total": { | |
"pct": 0.017, | |
"norm": { | |
"pct": 0.0043 | |
}, | |
"value": 7.04561e+06 | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:48.451-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 91262, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"pgid": 28171, | |
"memory": { | |
"size": 558006272, | |
"rss": { | |
"bytes": 25587712, | |
"pct": 0.0031 | |
}, | |
"share": 13688832 | |
}, | |
"cwd": "/etc/metricbeat", | |
"pid": 28171, | |
"cpu": { | |
"total": { | |
"value": 800, | |
"pct": 0.016, | |
"norm": { | |
"pct": 0.004 | |
} | |
}, | |
"start_time": "2018-06-19T17:48:18.000Z" | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"ppid": 27887, | |
"username": "root", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"name": "metricbeat", | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:48.451-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"cwd": "/", | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136 | |
}, | |
"state": "sleeping", | |
"pgid": 1168, | |
"name": "python", | |
"fd": { | |
"open": 11, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"ppid": 1, | |
"username": "root", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0008 | |
}, | |
"value": 1.26758e+06, | |
"pct": 0.003 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"pid": 1168 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 91267 | |
} | |
} | |
2018-06-19T10:48:48.451-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 91646, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"total": { | |
"value": 690760, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"fd": { | |
"open": 4, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"cwd": "/", | |
"pid": 1319, | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"name": "xymond", | |
"state": "sleeping", | |
"username": "xymon", | |
"memory": { | |
"size": 51286016, | |
"rss": { | |
"pct": 0.001, | |
"bytes": 8130560 | |
}, | |
"share": 2699264 | |
}, | |
"ppid": 1171, | |
"pgid": 1171 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:48.451-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 91794, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"username": "root", | |
"memory": { | |
"rss": { | |
"bytes": 10014720, | |
"pct": 0.0012 | |
}, | |
"share": 4067328, | |
"size": 373985280 | |
}, | |
"cwd": "/", | |
"pid": 704, | |
"cmdline": "/usr/bin/graylog-collector-sidecar", | |
"fd": { | |
"open": 8, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"ppid": 1, | |
"state": "sleeping", | |
"cpu": { | |
"start_time": "2018-06-12T23:29:12.000Z", | |
"total": { | |
"norm": { | |
"pct": 0.0003 | |
}, | |
"value": 277420, | |
"pct": 0.001 | |
} | |
}, | |
"name": "graylog-collect", | |
"pgid": 704 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:48.451-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"cmdline": "/usr/bin/gnome-shell", | |
"ppid": 1674, | |
"username": "gdm", | |
"cwd": "/var/lib/gdm", | |
"pid": 1714, | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 1674, | |
"name": "gnome-shell", | |
"state": "sleeping", | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"pct": 0.0174, | |
"bytes": 142860288 | |
}, | |
"share": 48148480 | |
}, | |
"cpu": { | |
"total": { | |
"value": 201470, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
} | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 92021 | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:48:48.452-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"fd": { | |
"open": 52, | |
"limit": { | |
"hard": 16384, | |
"soft": 16384 | |
} | |
}, | |
"pgid": 509, | |
"name": "systemd-journal", | |
"username": "root", | |
"memory": { | |
"rss": { | |
"bytes": 23928832, | |
"pct": 0.0029 | |
}, | |
"share": 23531520, | |
"size": 62988288 | |
}, | |
"cwd": "/", | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 45730 | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"pid": 509, | |
"ppid": 1 | |
} | |
}, | |
"metricset": { | |
"rtt": 92032, | |
"name": "process", | |
"module": "system" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:49.243-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:48:58.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:58.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"cpu": { | |
"user": { | |
"pct": 0.023 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0.001 | |
}, | |
"system": { | |
"pct": 0.017 | |
}, | |
"idle": { | |
"pct": 3.959 | |
}, | |
"total": { | |
"pct": 0.041 | |
}, | |
"cores": 4, | |
"irq": { | |
"pct": 0 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"steal": { | |
"pct": 0 | |
} | |
} | |
}, | |
"metricset": { | |
"rtt": 244, | |
"name": "cpu", | |
"module": "system" | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:48:58.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:58.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"memory": { | |
"total": 8202727424, | |
"used": { | |
"bytes": 1798328320, | |
"pct": 0.2192 | |
}, | |
"free": 6404399104, | |
"actual": { | |
"free": 7295004672, | |
"used": { | |
"pct": 0.1107, | |
"bytes": 907722752 | |
} | |
}, | |
"swap": { | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552, | |
"total": 2147479552 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 278 | |
} | |
} | |
2018-06-19T10:48:58.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:58.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 120, | |
"name": "load", | |
"module": "system" | |
}, | |
"system": { | |
"load": { | |
"cores": 4, | |
"1": 0, | |
"5": 0.01, | |
"15": 0.05, | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:58.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:58.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 225 | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"bytes": 8797950592, | |
"packets": 33938429, | |
"errors": 0, | |
"dropped": 1698 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13603697, | |
"bytes": 1539412530 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:58.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:58.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 260, | |
"name": "network", | |
"module": "system" | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"dropped": 0, | |
"packets": 1706865, | |
"bytes": 6591896828, | |
"errors": 0 | |
}, | |
"name": "lo", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6591896828, | |
"packets": 1706865 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:48:58.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:58.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 267, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:58.243-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:58.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 519, | |
"name": "network", | |
"module": "system" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:58.312-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:58.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 32558, | |
"namespace": "system.process.summary", | |
"name": "process_summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"sleeping": 188, | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 188 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:58.447-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T10:48:58.449-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 89638 | |
}, | |
"system": { | |
"process": { | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"pgid": 6389, | |
"username": "root", | |
"cwd": "/", | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"pct": 0.018, | |
"norm": { | |
"pct": 0.0045 | |
}, | |
"value": 7.04579e+06 | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
}, | |
"fd": { | |
"open": 6, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"pid": 6389, | |
"ppid": 1, | |
"memory": { | |
"share": 14041088, | |
"size": 928202752, | |
"rss": { | |
"bytes": 30425088, | |
"pct": 0.0037 | |
} | |
}, | |
"name": "metricbeat" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:48:58.449-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"name": "metricbeat", | |
"username": "root", | |
"memory": { | |
"size": 558006272, | |
"rss": { | |
"bytes": 25616384, | |
"pct": 0.0031 | |
}, | |
"share": 13692928 | |
}, | |
"cwd": "/etc/metricbeat", | |
"cpu": { | |
"total": { | |
"value": 950, | |
"pct": 0.015, | |
"norm": { | |
"pct": 0.0038 | |
} | |
}, | |
"start_time": "2018-06-19T17:48:18.000Z" | |
}, | |
"pid": 28171, | |
"pgid": 28171, | |
"ppid": 27887, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"state": "sleeping", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 89667 | |
} | |
} | |
2018-06-19T10:48:58.449-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 89673 | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"cmdline": "/usr/bin/vmtoolsd", | |
"cpu": { | |
"total": { | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
}, | |
"value": 610530 | |
}, | |
"start_time": "2018-06-12T23:29:16.000Z" | |
}, | |
"fd": { | |
"open": 8, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 747, | |
"name": "vmtoolsd", | |
"cwd": "/", | |
"pgid": 747, | |
"ppid": 1, | |
"username": "root", | |
"memory": { | |
"size": 312348672, | |
"rss": { | |
"bytes": 6344704, | |
"pct": 0.0008 | |
}, | |
"share": 4878336 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:58.449-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"ppid": 1, | |
"cpu": { | |
"total": { | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
}, | |
"value": 1.2676e+06 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"fd": { | |
"open": 11, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"pgid": 1168, | |
"name": "python", | |
"cwd": "/", | |
"pid": 1168, | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"state": "sleeping", | |
"memory": { | |
"share": 11227136, | |
"size": 1634631680, | |
"rss": { | |
"pct": 0.0062, | |
"bytes": 51044352 | |
} | |
}, | |
"username": "root" | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 90031 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:58.449-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 90237 | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"total": { | |
"value": 2770, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:55.000Z" | |
}, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 4 | |
}, | |
"ppid": 1550, | |
"username": "xymon", | |
"memory": { | |
"size": 42053632, | |
"rss": { | |
"bytes": 2711552, | |
"pct": 0.0003 | |
}, | |
"share": 1585152 | |
}, | |
"cwd": "/", | |
"name": "xymond_history", | |
"state": "sleeping", | |
"pid": 1744, | |
"pgid": 1171, | |
"cmdline": "xymond_history" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:58.450-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 90244, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142860288, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"cwd": "/var/lib/gdm", | |
"pgid": 1674, | |
"name": "gnome-shell", | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 1714, | |
"cpu": { | |
"start_time": "2018-06-12T23:29:50.000Z", | |
"total": { | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 201470, | |
"pct": 0 | |
} | |
}, | |
"state": "sleeping", | |
"ppid": 1674, | |
"username": "gdm", | |
"cmdline": "/usr/bin/gnome-shell" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:58.450-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:48:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 90390 | |
}, | |
"system": { | |
"process": { | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"cpu": { | |
"start_time": "2018-06-12T23:29:04.000Z", | |
"total": { | |
"value": 45730, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
} | |
}, | |
"username": "root", | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 23928832, | |
"pct": 0.0029 | |
}, | |
"share": 23531520 | |
}, | |
"ppid": 1, | |
"name": "systemd-journal", | |
"cwd": "/", | |
"pgid": 509, | |
"state": "sleeping", | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"pid": 509 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:48:59.242-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:49:08.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:08.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"cpu": { | |
"softirq": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.0651 | |
}, | |
"system": { | |
"pct": 0.0351 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.0301 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"idle": { | |
"pct": 3.9349 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"cores": 4 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 220 | |
} | |
} | |
2018-06-19T10:49:08.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:08.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"memory": { | |
"total": 8202727424, | |
"used": { | |
"bytes": 1798631424, | |
"pct": 0.2193 | |
}, | |
"free": 6404096000, | |
"actual": { | |
"free": 7294705664, | |
"used": { | |
"bytes": 908021760, | |
"pct": 0.1107 | |
} | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 327 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:08.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:08.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 105, | |
"name": "load", | |
"module": "system" | |
}, | |
"system": { | |
"load": { | |
"1": 0, | |
"5": 0.01, | |
"15": 0.05, | |
"norm": { | |
"15": 0.0125, | |
"1": 0, | |
"5": 0.0025 | |
}, | |
"cores": 4 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:08.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:08.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 206 | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"bytes": 8798420275, | |
"packets": 33942366, | |
"errors": 0, | |
"dropped": 1698 | |
}, | |
"out": { | |
"packets": 13603799, | |
"bytes": 1539440716, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:08.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:08.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 216, | |
"name": "network", | |
"module": "system" | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6592146539, | |
"packets": 1706908 | |
}, | |
"out": { | |
"bytes": 6592146539, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1706908 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:08.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:08.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 223, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:08.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:08.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 626 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0 | |
}, | |
"name": "virbr0", | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
} | |
} | |
2018-06-19T10:49:08.311-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:08.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 30819, | |
"namespace": "system.process.summary" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"unknown": 0, | |
"total": 188, | |
"sleeping": 188, | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0 | |
} | |
} | |
} | |
} | |
2018-06-19T10:49:08.454-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 6 processes | |
2018-06-19T10:49:08.456-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 96763, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 928202752, | |
"rss": { | |
"bytes": 30425088, | |
"pct": 0.0037 | |
}, | |
"share": 14041088 | |
}, | |
"pid": 6389, | |
"pgid": 6389, | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0047 | |
}, | |
"value": 7.04598e+06, | |
"pct": 0.019 | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
}, | |
"ppid": 1, | |
"state": "sleeping", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"name": "metricbeat", | |
"username": "root", | |
"cwd": "/", | |
"fd": { | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
}, | |
"open": 6 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:08.457-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 96817, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"username": "root", | |
"cwd": "/etc/metricbeat", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 28171, | |
"name": "metricbeat", | |
"memory": { | |
"size": 558006272, | |
"rss": { | |
"bytes": 25645056, | |
"pct": 0.0031 | |
}, | |
"share": 13701120 | |
}, | |
"cpu": { | |
"start_time": "2018-06-19T17:48:18.000Z", | |
"total": { | |
"norm": { | |
"pct": 0.0037 | |
}, | |
"value": 1100, | |
"pct": 0.015 | |
} | |
}, | |
"ppid": 27887, | |
"state": "sleeping", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"pgid": 28171 | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:49:08.457-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 96827, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"ppid": 1, | |
"cwd": "/", | |
"pid": 1168, | |
"pgid": 1168, | |
"state": "sleeping", | |
"username": "root", | |
"name": "python", | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136 | |
}, | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"cpu": { | |
"total": { | |
"value": 1.26762e+06, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 11 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:08.457-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 98033 | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"pgid": 0, | |
"pid": 27765, | |
"name": "kworker/0:1", | |
"memory": { | |
"share": 0, | |
"size": 0, | |
"rss": { | |
"bytes": 0, | |
"pct": 0 | |
} | |
}, | |
"ppid": 2, | |
"fd": { | |
"open": 0, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"cpu": { | |
"total": { | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0002 | |
}, | |
"value": 10 | |
}, | |
"start_time": "2018-06-19T17:45:17.000Z" | |
}, | |
"username": "root" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:49:08.457-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 98049 | |
}, | |
"system": { | |
"process": { | |
"ppid": 1674, | |
"cmdline": "/usr/bin/gnome-shell", | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"state": "sleeping", | |
"cwd": "/var/lib/gdm", | |
"cpu": { | |
"total": { | |
"value": 201480, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0002 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"pid": 1714, | |
"username": "gdm", | |
"pgid": 1674, | |
"name": "gnome-shell", | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142860288, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:08.458-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 98059, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 23928832, | |
"pct": 0.0029 | |
}, | |
"share": 23531520 | |
}, | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"cwd": "/", | |
"name": "systemd-journal", | |
"cpu": { | |
"total": { | |
"value": 45730, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"username": "root", | |
"pgid": 509, | |
"ppid": 1, | |
"state": "sleeping", | |
"pid": 509 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:09.241-0700 DEBUG [logstash] logstash/async.go:142 14 events out of 14 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:49:18.237-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":490,"time":497},"total":{"ticks":1120,"time":1129,"value":1120},"user":{"ticks":630,"time":632}},"info":{"ephemeral_id":"b8779173-060a-43f9-be93-1ad877af938a","uptime":{"ms":60057}},"memstats":{"gc_next":4510256,"memory_alloc":3762072,"memory_total":96102944,"rss":212992}},"libbeat":{"config":{"module":{"running":3}},"output":{"events":{"acked":44,"batches":3,"total":44},"read":{"bytes":18},"write":{"bytes":6162}},"pipeline":{"clients":6,"events":{"active":0,"published":44,"total":44},"queue":{"acked":44}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":20,"success":20},"process_summary":{"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-19T10:49:18.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:18.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 144, | |
"name": "cpu" | |
}, | |
"system": { | |
"cpu": { | |
"steal": { | |
"pct": 0 | |
}, | |
"cores": 4, | |
"system": { | |
"pct": 0.024 | |
}, | |
"iowait": { | |
"pct": 0.001 | |
}, | |
"total": { | |
"pct": 0.0531 | |
}, | |
"idle": { | |
"pct": 3.9469 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.027 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0.001 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:18.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:18.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"memory": { | |
"free": 6401048576, | |
"actual": { | |
"free": 7291666432, | |
"used": { | |
"bytes": 911060992, | |
"pct": 0.1111 | |
} | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1801678848, | |
"pct": 0.2196 | |
} | |
} | |
}, | |
"metricset": { | |
"rtt": 705, | |
"name": "memory", | |
"module": "system" | |
} | |
} | |
2018-06-19T10:49:18.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:18.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 98 | |
}, | |
"system": { | |
"load": { | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
}, | |
"cores": 4, | |
"1": 0, | |
"5": 0.01, | |
"15": 0.05 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:18.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8798810727, | |
"packets": 33943438 | |
}, | |
"out": { | |
"packets": 13604780, | |
"bytes": 1539534533, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"name": "ens192" | |
} | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 244, | |
"name": "network" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:18.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6592422705, | |
"packets": 1706978 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 1706978, | |
"bytes": 6592422705, | |
"errors": 0 | |
} | |
} | |
}, | |
"metricset": { | |
"rtt": 291, | |
"name": "network", | |
"module": "system" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:18.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 301 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:18.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 599 | |
} | |
} | |
2018-06-19T10:49:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: / total=18746441728, used=6683729920, free=12062711808 | |
2018-06-19T10:49:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys total=0, used=0, free=0 | |
2018-06-19T10:49:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc total=0, used=0, free=0 | |
2018-06-19T10:49:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev total=4084723712, used=0, free=4084723712 | |
2018-06-19T10:49:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/security total=0, used=0, free=0 | |
2018-06-19T10:49:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/shm total=4101361664, used=81920, free=4101279744 | |
2018-06-19T10:49:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/pts total=0, used=0, free=0 | |
2018-06-19T10:49:18.246-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 499 | |
}, | |
"system": { | |
"filesystem": { | |
"mount_point": "/", | |
"total": 18746441728, | |
"free": 12062711808, | |
"type": "rootfs", | |
"available": 12062711808, | |
"free_files": 18077679, | |
"files": 18317312, | |
"used": { | |
"bytes": 6683729920, | |
"pct": 0.3565 | |
}, | |
"device_name": "rootfs" | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:49:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run total=4101361664, used=76435456, free=4024926208 | |
2018-06-19T10:49:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup total=4101361664, used=0, free=4101361664 | |
2018-06-19T10:49:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/systemd total=0, used=0, free=0 | |
2018-06-19T10:49:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/pstore total=0, used=0, free=0 | |
2018-06-19T10:49:18.246-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 743 | |
}, | |
"system": { | |
"filesystem": { | |
"free_files": 1000766, | |
"free": 4024926208, | |
"used": { | |
"pct": 0.0186, | |
"bytes": 76435456 | |
}, | |
"type": "tmpfs", | |
"total": 4101361664, | |
"mount_point": "/run", | |
"device_name": "tmpfs", | |
"available": 4024926208, | |
"files": 1001309 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/perf_event total=0, used=0, free=0 | |
2018-06-19T10:49:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/freezer total=0, used=0, free=0 | |
2018-06-19T10:49:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/memory total=0, used=0, free=0 | |
2018-06-19T10:49:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/pids total=0, used=0, free=0 | |
2018-06-19T10:49:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/cpu,cpuacct total=0, used=0, free=0 | |
2018-06-19T10:49:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/blkio total=0, used=0, free=0 | |
2018-06-19T10:49:18.246-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 1176 | |
}, | |
"system": { | |
"filesystem": { | |
"free_files": 18077679, | |
"type": "xfs", | |
"mount_point": "/", | |
"used": { | |
"pct": 0.3565, | |
"bytes": 6683729920 | |
}, | |
"total": 18746441728, | |
"files": 18317312, | |
"device_name": "/dev/mapper/rhel-root", | |
"free": 12062711808, | |
"available": 12062711808 | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:49:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/net_cls,net_prio total=0, used=0, free=0 | |
2018-06-19T10:49:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/devices total=0, used=0, free=0 | |
2018-06-19T10:49:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/hugetlb total=0, used=0, free=0 | |
2018-06-19T10:49:18.246-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 1376, | |
"name": "filesystem" | |
}, | |
"system": { | |
"filesystem": { | |
"total": 520794112, | |
"used": { | |
"pct": 0.5408, | |
"bytes": 281665536 | |
}, | |
"type": "xfs", | |
"free_files": 511656, | |
"available": 239128576, | |
"files": 512000, | |
"mount_point": "/boot", | |
"device_name": "/dev/sda1", | |
"free": 239128576 | |
} | |
} | |
} | |
2018-06-19T10:49:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/cpuset total=0, used=0, free=0 | |
2018-06-19T10:49:18.247-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/config total=0, used=0, free=0 | |
2018-06-19T10:49:18.247-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: / total=18746441728, used=6683729920, free=12062711808 | |
2018-06-19T10:49:18.247-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/sys/fs/binfmt_misc total=0, used=0, free=0 | |
2018-06-19T10:49:18.247-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 1380, | |
"name": "filesystem" | |
}, | |
"system": { | |
"filesystem": { | |
"free": 0, | |
"used": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"device_name": "sunrpc", | |
"available": 0, | |
"files": 0, | |
"free_files": 0, | |
"type": "rpc_pipefs", | |
"mount_point": "/var/lib/nfs/rpc_pipefs", | |
"total": 0 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:18.247-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 1555, | |
"name": "filesystem" | |
}, | |
"system": { | |
"filesystem": { | |
"available": 820260864, | |
"files": 1001309, | |
"free_files": 1001300, | |
"type": "tmpfs", | |
"device_name": "tmpfs", | |
"mount_point": "/run/user/42", | |
"free": 820260864, | |
"total": 820273152, | |
"used": { | |
"pct": 0, | |
"bytes": 12288 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:18.247-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/mqueue total=0, used=0, free=0 | |
2018-06-19T10:49:18.247-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/hugepages total=0, used=0, free=0 | |
2018-06-19T10:49:18.247-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"filesystem": { | |
"used": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"available": 820273152, | |
"files": 1001309, | |
"mount_point": "/run/user/0", | |
"total": 820273152, | |
"free_files": 1001308, | |
"device_name": "tmpfs", | |
"type": "tmpfs", | |
"free": 820273152 | |
} | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 1857 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:18.247-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/debug total=0, used=0, free=0 | |
2018-06-19T10:49:18.247-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/fs/nfsd total=0, used=0, free=0 | |
2018-06-19T10:49:18.247-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /boot total=520794112, used=281665536, free=239128576 | |
2018-06-19T10:49:18.247-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /var/lib/nfs/rpc_pipefs total=0, used=0, free=0 | |
2018-06-19T10:49:18.247-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/sys/fs/binfmt_misc total=0, used=0, free=0 | |
2018-06-19T10:49:18.248-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run/user/42 total=820273152, used=12288, free=820260864 | |
2018-06-19T10:49:18.248-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run/user/0 total=820273152, used=0, free=820273152 | |
2018-06-19T10:49:18.248-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "fsstat", | |
"module": "system", | |
"rtt": 2678 | |
}, | |
"system": { | |
"fsstat": { | |
"count": 31, | |
"total_files": 24833104, | |
"total_size": { | |
"total": 37296590848, | |
"free": 30254665728, | |
"used": 7041925120 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:18.317-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:18.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 190, | |
"sleeping": 188, | |
"running": 2 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 36781, | |
"namespace": "system.process.summary" | |
} | |
} | |
2018-06-19T10:49:18.458-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T10:49:18.460-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 6 | |
}, | |
"name": "metricbeat", | |
"cwd": "/etc/metricbeat", | |
"state": "sleeping", | |
"username": "root", | |
"memory": { | |
"size": 558006272, | |
"rss": { | |
"bytes": 25653248, | |
"pct": 0.0031 | |
}, | |
"share": 13701120 | |
}, | |
"pgid": 28171, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"cpu": { | |
"total": { | |
"value": 1280, | |
"pct": 0.018, | |
"norm": { | |
"pct": 0.0045 | |
} | |
}, | |
"start_time": "2018-06-19T17:48:18.000Z" | |
}, | |
"pid": 28171, | |
"ppid": 27887 | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 100303 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:18.460-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 100349 | |
}, | |
"system": { | |
"process": { | |
"pgid": 6389, | |
"memory": { | |
"size": 928202752, | |
"rss": { | |
"pct": 0.0037, | |
"bytes": 30425088 | |
}, | |
"share": 14041088 | |
}, | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.004 | |
}, | |
"value": 7.04614e+06, | |
"pct": 0.016 | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
}, | |
"username": "root", | |
"state": "sleeping", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"cwd": "/", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"pid": 6389, | |
"ppid": 1, | |
"name": "metricbeat" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:18.460-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 100355, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 11 | |
}, | |
"username": "root", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"cpu": { | |
"total": { | |
"pct": 0.003, | |
"norm": { | |
"pct": 0.0007 | |
}, | |
"value": 1.26765e+06 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"name": "python", | |
"cwd": "/", | |
"state": "sleeping", | |
"memory": { | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136, | |
"size": 1634631680 | |
}, | |
"pid": 1168, | |
"ppid": 1, | |
"pgid": 1168 | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:49:18.460-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 100697, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 4, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"state": "sleeping", | |
"cwd": "/", | |
"pgid": 1171, | |
"name": "xymond", | |
"username": "xymon", | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"ppid": 1171, | |
"memory": { | |
"size": 51286016, | |
"rss": { | |
"pct": 0.001, | |
"bytes": 8130560 | |
}, | |
"share": 2699264 | |
}, | |
"cpu": { | |
"total": { | |
"value": 690790, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"pid": 1319 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:18.460-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 100843 | |
}, | |
"system": { | |
"process": { | |
"name": "sshd", | |
"ppid": 1172, | |
"cwd": "/", | |
"memory": { | |
"size": 158511104, | |
"rss": { | |
"bytes": 6496256, | |
"pct": 0.0008 | |
}, | |
"share": 5001216 | |
}, | |
"pgid": 27870, | |
"username": "root", | |
"cmdline": "sshd: root@pts/0 ", | |
"cpu": { | |
"total": { | |
"value": 110, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0002 | |
} | |
}, | |
"start_time": "2018-06-19T17:46:08.000Z" | |
}, | |
"fd": { | |
"open": 13, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 27870, | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:18.460-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 100982, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 201480 | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"pid": 1714, | |
"username": "gdm", | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142860288, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"cwd": "/var/lib/gdm", | |
"pgid": 1674, | |
"cmdline": "/usr/bin/gnome-shell", | |
"ppid": 1674, | |
"name": "gnome-shell", | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:49:18.461-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 101138, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"name": "systemd-journal", | |
"fd": { | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
}, | |
"open": 52 | |
}, | |
"ppid": 1, | |
"username": "root", | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 45730 | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"pgid": 509, | |
"memory": { | |
"rss": { | |
"bytes": 23932928, | |
"pct": 0.0029 | |
}, | |
"share": 23535616, | |
"size": 62988288 | |
}, | |
"pid": 509, | |
"state": "sleeping", | |
"cwd": "/" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:19.243-0700 DEBUG [logstash] logstash/async.go:142 23 events out of 23 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:49:28.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:28.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 242 | |
}, | |
"system": { | |
"cpu": { | |
"irq": { | |
"pct": 0 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"cores": 4, | |
"user": { | |
"pct": 0.024 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0 | |
}, | |
"system": { | |
"pct": 0.021 | |
}, | |
"idle": { | |
"pct": 3.9549 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.0451 | |
} | |
} | |
} | |
} | |
2018-06-19T10:49:28.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:28.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 291 | |
}, | |
"system": { | |
"memory": { | |
"used": { | |
"bytes": 1799155712, | |
"pct": 0.2193 | |
}, | |
"free": 6403571712, | |
"actual": { | |
"free": 7294189568, | |
"used": { | |
"pct": 0.1108, | |
"bytes": 908537856 | |
} | |
}, | |
"swap": { | |
"free": 2147479552, | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
} | |
}, | |
"total": 8202727424 | |
} | |
} | |
} | |
2018-06-19T10:49:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:28.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 108, | |
"name": "load" | |
}, | |
"system": { | |
"load": { | |
"1": 0, | |
"5": 0.01, | |
"15": 0.05, | |
"norm": { | |
"15": 0.0125, | |
"1": 0, | |
"5": 0.0025 | |
}, | |
"cores": 4 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:28.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 179 | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8798943388, | |
"packets": 33943807 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13605053, | |
"bytes": 1539589758 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:28.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1707039, | |
"bytes": 6592573945 | |
}, | |
"name": "lo", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6592573945, | |
"packets": 1707039 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 188, | |
"name": "network" | |
} | |
} | |
2018-06-19T10:49:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:28.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 193, | |
"name": "network", | |
"module": "system" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:49:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:28.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 490 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0 | |
} | |
} | |
} | |
} | |
2018-06-19T10:49:28.313-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:28.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 32986, | |
"namespace": "system.process.summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 188, | |
"sleeping": 188 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:28.463-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T10:49:28.464-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 105156, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"pid": 28171, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 6 | |
}, | |
"name": "metricbeat", | |
"memory": { | |
"size": 633507840, | |
"rss": { | |
"pct": 0.0032, | |
"bytes": 25919488 | |
}, | |
"share": 13713408 | |
}, | |
"cpu": { | |
"start_time": "2018-06-19T17:48:18.000Z", | |
"total": { | |
"norm": { | |
"pct": 0.0042 | |
}, | |
"value": 1450, | |
"pct": 0.017 | |
} | |
}, | |
"ppid": 27887, | |
"state": "sleeping", | |
"pgid": 28171, | |
"username": "root", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"cwd": "/etc/metricbeat" | |
} | |
} | |
} | |
2018-06-19T10:49:28.465-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"ppid": 1, | |
"state": "sleeping", | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"pct": 0.016, | |
"norm": { | |
"pct": 0.004 | |
}, | |
"value": 7.0463e+06 | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
}, | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"memory": { | |
"size": 928202752, | |
"rss": { | |
"bytes": 30425088, | |
"pct": 0.0037 | |
}, | |
"share": 14041088 | |
}, | |
"pgid": 6389, | |
"name": "metricbeat", | |
"username": "root", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"pid": 6389 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 105189, | |
"name": "process", | |
"module": "system" | |
} | |
} | |
2018-06-19T10:49:28.465-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 105196 | |
}, | |
"system": { | |
"process": { | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"username": "xymon", | |
"name": "xymond", | |
"state": "sleeping", | |
"memory": { | |
"share": 2699264, | |
"size": 51286016, | |
"rss": { | |
"bytes": 8130560, | |
"pct": 0.001 | |
} | |
}, | |
"cwd": "/", | |
"pid": 1319, | |
"cpu": { | |
"total": { | |
"value": 690820, | |
"pct": 0.003, | |
"norm": { | |
"pct": 0.0007 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"ppid": 1171, | |
"pgid": 1171, | |
"fd": { | |
"open": 4, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:49:28.465-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"username": "root", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"cwd": "/", | |
"memory": { | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136, | |
"size": 1634631680 | |
}, | |
"ppid": 1, | |
"name": "python", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 11 | |
}, | |
"pgid": 1168, | |
"cpu": { | |
"total": { | |
"value": 1.26767e+06, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"pid": 1168 | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 105593 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:28.465-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"pid": 747, | |
"memory": { | |
"size": 312348672, | |
"rss": { | |
"bytes": 6344704, | |
"pct": 0.0008 | |
}, | |
"share": 4878336 | |
}, | |
"cmdline": "/usr/bin/vmtoolsd", | |
"pgid": 747, | |
"state": "sleeping", | |
"fd": { | |
"open": 8, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0002 | |
}, | |
"value": 610560, | |
"pct": 0.001 | |
}, | |
"start_time": "2018-06-12T23:29:16.000Z" | |
}, | |
"ppid": 1, | |
"name": "vmtoolsd", | |
"username": "root" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 105733 | |
} | |
} | |
2018-06-19T10:49:28.465-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 105873 | |
}, | |
"system": { | |
"process": { | |
"ppid": 1674, | |
"pgid": 1674, | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"value": 201480, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142860288, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"cmdline": "/usr/bin/gnome-shell", | |
"cwd": "/var/lib/gdm", | |
"fd": { | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
}, | |
"open": 36 | |
}, | |
"pid": 1714, | |
"username": "gdm", | |
"name": "gnome-shell" | |
} | |
} | |
} | |
2018-06-19T10:49:28.465-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 106088, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"value": 45730, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"fd": { | |
"open": 52, | |
"limit": { | |
"hard": 16384, | |
"soft": 16384 | |
} | |
}, | |
"ppid": 1, | |
"pgid": 509, | |
"name": "systemd-journal", | |
"state": "sleeping", | |
"pid": 509, | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 23932928, | |
"pct": 0.0029 | |
}, | |
"share": 23535616 | |
}, | |
"username": "root" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:49:29.243-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:49:38.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:38.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 218, | |
"name": "cpu" | |
}, | |
"system": { | |
"cpu": { | |
"steal": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.0411 | |
}, | |
"user": { | |
"pct": 0.022 | |
}, | |
"softirq": { | |
"pct": 0.001 | |
}, | |
"idle": { | |
"pct": 3.9589 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"system": { | |
"pct": 0.018 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"cores": 4, | |
"irq": { | |
"pct": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:38.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:38.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 286, | |
"name": "memory" | |
}, | |
"system": { | |
"memory": { | |
"total": 8202727424, | |
"used": { | |
"bytes": 1799426048, | |
"pct": 0.2194 | |
}, | |
"free": 6403301376, | |
"actual": { | |
"free": 7293919232, | |
"used": { | |
"pct": 0.1108, | |
"bytes": 908808192 | |
} | |
}, | |
"swap": { | |
"free": 2147479552, | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:38.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"load": { | |
"15": 0.05, | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
}, | |
"cores": 4, | |
"1": 0, | |
"5": 0.01 | |
} | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 110 | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:49:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:38.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"dropped": 1698, | |
"bytes": 8799145424, | |
"packets": 33944139, | |
"errors": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 13605186, | |
"bytes": 1539621504, | |
"errors": 0 | |
}, | |
"name": "ens192" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 186, | |
"name": "network", | |
"module": "system" | |
} | |
} | |
2018-06-19T10:49:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:38.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"bytes": 6592719884, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1707057 | |
}, | |
"name": "lo", | |
"in": { | |
"dropped": 0, | |
"bytes": 6592719884, | |
"packets": 1707057, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 209, | |
"name": "network" | |
} | |
} | |
2018-06-19T10:49:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:38.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 214 | |
} | |
} | |
2018-06-19T10:49:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:38.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0 | |
}, | |
"name": "virbr0", | |
"in": { | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 453 | |
} | |
} | |
2018-06-19T10:49:38.311-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:38.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 31533, | |
"namespace": "system.process.summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"sleeping": 188, | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 188 | |
} | |
} | |
} | |
} | |
2018-06-19T10:49:38.464-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T10:49:38.466-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 6 | |
}, | |
"pid": 28171, | |
"state": "sleeping", | |
"username": "root", | |
"memory": { | |
"size": 633507840, | |
"rss": { | |
"pct": 0.0032, | |
"bytes": 25948160 | |
}, | |
"share": 13721600 | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"cwd": "/etc/metricbeat", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0043 | |
}, | |
"value": 1620, | |
"pct": 0.017 | |
}, | |
"start_time": "2018-06-19T17:48:18.000Z" | |
}, | |
"ppid": 27887, | |
"pgid": 28171, | |
"name": "metricbeat" | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 106469 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:38.466-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 106502, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"cwd": "/", | |
"username": "root", | |
"memory": { | |
"size": 928202752, | |
"rss": { | |
"bytes": 30425088, | |
"pct": 0.0037 | |
}, | |
"share": 14041088 | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"pid": 6389, | |
"ppid": 1, | |
"pgid": 6389, | |
"name": "metricbeat", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"value": 7.04647e+06, | |
"pct": 0.017, | |
"norm": { | |
"pct": 0.0043 | |
} | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:38.466-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 106508 | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"cwd": "/", | |
"name": "python", | |
"username": "root", | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136 | |
}, | |
"pgid": 1168, | |
"pid": 1168, | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"ppid": 1, | |
"cpu": { | |
"start_time": "2018-06-12T23:29:34.000Z", | |
"total": { | |
"value": 1.26769e+06, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
} | |
}, | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:49:38.466-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 106848 | |
}, | |
"system": { | |
"process": { | |
"name": "ksoftirqd/3", | |
"username": "root", | |
"fd": { | |
"open": 0, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"value": 4270, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0002 | |
} | |
}, | |
"start_time": "2018-06-12T23:28:51.000Z" | |
}, | |
"ppid": 2, | |
"memory": { | |
"rss": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"share": 0, | |
"size": 0 | |
}, | |
"pid": 23, | |
"pgid": 0 | |
} | |
} | |
} | |
2018-06-19T10:49:38.466-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 107014 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"name": "filebeat", | |
"state": "sleeping", | |
"fd": { | |
"open": 7, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"cwd": "/", | |
"ppid": 704, | |
"pgid": 704, | |
"memory": { | |
"size": 629047296, | |
"rss": { | |
"bytes": 21237760, | |
"pct": 0.0026 | |
}, | |
"share": 8273920 | |
}, | |
"cmdline": "/usr/bin/filebeat -c /etc/graylog/collector-sidecar/generated/filebeat.yml", | |
"cpu": { | |
"total": { | |
"value": 368140, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:19.000Z" | |
}, | |
"username": "root", | |
"pid": 831 | |
} | |
} | |
} | |
2018-06-19T10:49:38.466-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 107141 | |
}, | |
"system": { | |
"process": { | |
"pgid": 1674, | |
"cwd": "/var/lib/gdm", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 36 | |
}, | |
"username": "gdm", | |
"cpu": { | |
"total": { | |
"value": 201480, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"pid": 1714, | |
"memory": { | |
"share": 48148480, | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142860288, | |
"pct": 0.0174 | |
} | |
}, | |
"cmdline": "/usr/bin/gnome-shell", | |
"ppid": 1674, | |
"name": "gnome-shell", | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:49:38.467-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 23937024, | |
"pct": 0.0029 | |
}, | |
"share": 23539712 | |
}, | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"cpu": { | |
"total": { | |
"value": 45730, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"username": "root", | |
"pid": 509, | |
"name": "systemd-journal", | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"cwd": "/", | |
"pgid": 509, | |
"ppid": 1 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 107185, | |
"name": "process", | |
"module": "system" | |
} | |
} | |
2018-06-19T10:49:39.242-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:49:48.236-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":730,"time":739},"total":{"ticks":1640,"time":1649,"value":1640},"user":{"ticks":910,"time":910}},"info":{"ephemeral_id":"b8779173-060a-43f9-be93-1ad877af938a","uptime":{"ms":90057}},"memstats":{"gc_next":7314448,"memory_alloc":3659080,"memory_total":140890136,"rss":307200}},"libbeat":{"config":{"module":{"running":3}},"output":{"events":{"acked":53,"batches":3,"total":53},"read":{"bytes":18},"write":{"bytes":7106}},"pipeline":{"clients":6,"events":{"active":0,"filtered":26,"published":53,"total":79},"queue":{"acked":53}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"filesystem":{"events":33,"success":33},"fsstat":{"events":1,"success":1},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":21,"success":21},"process_summary":{"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-19T10:49:48.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:48.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 222 | |
}, | |
"system": { | |
"cpu": { | |
"softirq": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.021 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"cores": 4, | |
"system": { | |
"pct": 0.017 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"idle": { | |
"pct": 3.962 | |
}, | |
"total": { | |
"pct": 0.038 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:48.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:48.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"memory": { | |
"total": 8202727424, | |
"used": { | |
"bytes": 1799426048, | |
"pct": 0.2194 | |
}, | |
"free": 6403301376, | |
"actual": { | |
"free": 7293919232, | |
"used": { | |
"pct": 0.1108, | |
"bytes": 908808192 | |
} | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 402, | |
"name": "memory" | |
} | |
} | |
2018-06-19T10:49:48.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:48.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 98 | |
}, | |
"system": { | |
"load": { | |
"15": 0.05, | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
}, | |
"cores": 4, | |
"1": 0, | |
"5": 0.01 | |
} | |
} | |
} | |
2018-06-19T10:49:48.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:48.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 166 | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"dropped": 1698, | |
"bytes": 8799160731, | |
"packets": 33944339, | |
"errors": 0 | |
}, | |
"out": { | |
"bytes": 1539646799, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13605219 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:48.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:48.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 174 | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6592719884, | |
"packets": 1707057 | |
}, | |
"out": { | |
"bytes": 6592719884, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1707057 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:48.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:48.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 179, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:49:48.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:48.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 462, | |
"name": "network", | |
"module": "system" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:49:48.314-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:48.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 34348, | |
"namespace": "system.process.summary", | |
"name": "process_summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 188, | |
"sleeping": 188, | |
"running": 0, | |
"idle": 0 | |
} | |
} | |
} | |
} | |
2018-06-19T10:49:48.455-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T10:49:48.457-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"ppid": 27887, | |
"name": "metricbeat", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"pgid": 28171, | |
"cpu": { | |
"total": { | |
"value": 1790, | |
"pct": 0.017, | |
"norm": { | |
"pct": 0.0043 | |
} | |
}, | |
"start_time": "2018-06-19T17:48:18.000Z" | |
}, | |
"username": "root", | |
"memory": { | |
"rss": { | |
"bytes": 26124288, | |
"pct": 0.0032 | |
}, | |
"share": 13725696, | |
"size": 633507840 | |
}, | |
"cwd": "/etc/metricbeat", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 28171 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 97797 | |
} | |
} | |
2018-06-19T10:49:48.457-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 97842 | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"rss": { | |
"bytes": 30425088, | |
"pct": 0.0037 | |
}, | |
"share": 14041088, | |
"size": 928202752 | |
}, | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"name": "metricbeat", | |
"cpu": { | |
"start_time": "2018-06-14T16:41:30.000Z", | |
"total": { | |
"norm": { | |
"pct": 0.004 | |
}, | |
"value": 7.04663e+06, | |
"pct": 0.016 | |
} | |
}, | |
"ppid": 1, | |
"pid": 6389, | |
"pgid": 6389, | |
"username": "root", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"cwd": "/", | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:48.457-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 97852 | |
}, | |
"system": { | |
"process": { | |
"pgid": 1168, | |
"name": "python", | |
"cpu": { | |
"total": { | |
"value": 1.26771e+06, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"fd": { | |
"open": 11, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"ppid": 1, | |
"state": "sleeping", | |
"username": "root", | |
"memory": { | |
"share": 11227136, | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
} | |
}, | |
"cwd": "/", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"pid": 1168 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:48.458-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 98271, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"total": { | |
"value": 120, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
}, | |
"start_time": "2018-06-19T17:46:08.000Z" | |
}, | |
"username": "root", | |
"state": "sleeping", | |
"cwd": "/", | |
"memory": { | |
"share": 5001216, | |
"size": 158511104, | |
"rss": { | |
"pct": 0.0008, | |
"bytes": 6496256 | |
} | |
}, | |
"pid": 27870, | |
"pgid": 27870, | |
"cmdline": "sshd: root@pts/0 ", | |
"fd": { | |
"open": 13, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 1172, | |
"name": "sshd" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:48.458-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"ppid": 2, | |
"pgid": 0, | |
"pid": 3396, | |
"cpu": { | |
"start_time": "2018-06-19T13:54:28.000Z", | |
"total": { | |
"value": 2000, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
} | |
}, | |
"state": "sleeping", | |
"username": "root", | |
"name": "kworker/0:0", | |
"memory": { | |
"share": 0, | |
"size": 0, | |
"rss": { | |
"bytes": 0, | |
"pct": 0 | |
} | |
}, | |
"fd": { | |
"open": 0, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 98468 | |
} | |
} | |
2018-06-19T10:49:48.458-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 98655 | |
}, | |
"system": { | |
"process": { | |
"cwd": "/var/lib/gdm", | |
"ppid": 1674, | |
"cpu": { | |
"start_time": "2018-06-12T23:29:50.000Z", | |
"total": { | |
"value": 201480, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
} | |
}, | |
"pgid": 1674, | |
"username": "gdm", | |
"cmdline": "/usr/bin/gnome-shell", | |
"state": "sleeping", | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142860288, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 1714, | |
"name": "gnome-shell" | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:49:48.458-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 98840 | |
}, | |
"system": { | |
"process": { | |
"name": "systemd-journal", | |
"cpu": { | |
"start_time": "2018-06-12T23:29:04.000Z", | |
"total": { | |
"value": 45730, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
} | |
}, | |
"memory": { | |
"share": 23539712, | |
"size": 62988288, | |
"rss": { | |
"bytes": 23937024, | |
"pct": 0.0029 | |
} | |
}, | |
"username": "root", | |
"cwd": "/", | |
"pid": 509, | |
"ppid": 1, | |
"state": "sleeping", | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"pgid": 509 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:49.243-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:49:58.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:58.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 206 | |
}, | |
"system": { | |
"cpu": { | |
"user": { | |
"pct": 0.021 | |
}, | |
"idle": { | |
"pct": 3.9619 | |
}, | |
"system": { | |
"pct": 0.017 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"cores": 4, | |
"nice": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.0381 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:58.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:58.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 312 | |
}, | |
"system": { | |
"memory": { | |
"free": 6403268608, | |
"actual": { | |
"free": 7293886464, | |
"used": { | |
"pct": 0.1108, | |
"bytes": 908840960 | |
} | |
}, | |
"swap": { | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552, | |
"total": 2147479552 | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1799458816, | |
"pct": 0.2194 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:49:58.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:58.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 98, | |
"name": "load", | |
"module": "system" | |
}, | |
"system": { | |
"load": { | |
"5": 0.01, | |
"15": 0.05, | |
"norm": { | |
"5": 0.0025, | |
"15": 0.0125, | |
"1": 0 | |
}, | |
"cores": 4, | |
"1": 0 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:58.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:58.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 201 | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"bytes": 8799179670, | |
"packets": 33944574, | |
"errors": 0, | |
"dropped": 1698 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 13605255, | |
"bytes": 1539670494, | |
"errors": 0 | |
}, | |
"name": "ens192" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:58.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:58.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"bytes": 6592719884, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1707057 | |
}, | |
"name": "lo", | |
"in": { | |
"dropped": 0, | |
"bytes": 6592719884, | |
"packets": 1707057, | |
"errors": 0 | |
} | |
} | |
}, | |
"metricset": { | |
"rtt": 233, | |
"name": "network", | |
"module": "system" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:58.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:58.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 244, | |
"name": "network", | |
"module": "system" | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0 | |
}, | |
"name": "virbr0-nic", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:58.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:58.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 514 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:58.312-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:58.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"total": 188, | |
"sleeping": 188, | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
}, | |
"metricset": { | |
"namespace": "system.process.summary", | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 32460 | |
} | |
} | |
2018-06-19T10:49:58.458-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T10:49:58.460-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 6 | |
}, | |
"pid": 28171, | |
"state": "sleeping", | |
"memory": { | |
"rss": { | |
"bytes": 26169344, | |
"pct": 0.0032 | |
}, | |
"share": 13729792, | |
"size": 633507840 | |
}, | |
"name": "metricbeat", | |
"cwd": "/etc/metricbeat", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.004 | |
}, | |
"value": 1950, | |
"pct": 0.016 | |
}, | |
"start_time": "2018-06-19T17:48:18.000Z" | |
}, | |
"pgid": 28171, | |
"username": "root", | |
"ppid": 27887 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 100611 | |
} | |
} | |
2018-06-19T10:49:58.460-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 100644 | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"share": 14041088, | |
"size": 928202752, | |
"rss": { | |
"bytes": 30425088, | |
"pct": 0.0037 | |
} | |
}, | |
"pid": 6389, | |
"state": "sleeping", | |
"username": "root", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"cpu": { | |
"total": { | |
"value": 7.04679e+06, | |
"pct": 0.016, | |
"norm": { | |
"pct": 0.004 | |
} | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
}, | |
"fd": { | |
"open": 6, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"pgid": 6389, | |
"ppid": 1, | |
"name": "metricbeat", | |
"cwd": "/" | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:49:58.460-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 100650, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"pid": 1168, | |
"ppid": 1, | |
"state": "sleeping", | |
"pgid": 1168, | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"cwd": "/", | |
"name": "python", | |
"cpu": { | |
"total": { | |
"value": 1.26773e+06, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"username": "root", | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:58.460-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 101088, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"memory": { | |
"size": 195588096, | |
"rss": { | |
"bytes": 4194304, | |
"pct": 0.0005 | |
}, | |
"share": 2605056 | |
}, | |
"username": "root", | |
"pid": 1, | |
"ppid": 0, | |
"fd": { | |
"open": 49, | |
"limit": { | |
"soft": 65536, | |
"hard": 65536 | |
} | |
}, | |
"pgid": 1, | |
"name": "systemd", | |
"cpu": { | |
"total": { | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
}, | |
"value": 187840 | |
}, | |
"start_time": "2018-06-12T23:28:51.000Z" | |
}, | |
"cmdline": "/usr/lib/systemd/systemd --switched-root --system --deserialize 21", | |
"cwd": "/" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:58.460-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 101106 | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 4, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 1171, | |
"state": "sleeping", | |
"username": "xymon", | |
"memory": { | |
"size": 51286016, | |
"rss": { | |
"bytes": 8130560, | |
"pct": 0.001 | |
}, | |
"share": 2699264 | |
}, | |
"pid": 1319, | |
"pgid": 1171, | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"name": "xymond", | |
"cpu": { | |
"total": { | |
"value": 690840, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"cwd": "/" | |
} | |
} | |
} | |
2018-06-19T10:49:58.461-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 36, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"pgid": 1674, | |
"cmdline": "/usr/bin/gnome-shell", | |
"name": "gnome-shell", | |
"memory": { | |
"share": 48148480, | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142860288, | |
"pct": 0.0174 | |
} | |
}, | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 201480, | |
"pct": 0 | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"pid": 1714, | |
"ppid": 1674, | |
"username": "gdm", | |
"state": "sleeping", | |
"cwd": "/var/lib/gdm" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 101319, | |
"name": "process", | |
"module": "system" | |
} | |
} | |
2018-06-19T10:49:58.461-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:49:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 101334, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"username": "root", | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 45730, | |
"pct": 0 | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"pid": 509, | |
"name": "systemd-journal", | |
"pgid": 509, | |
"state": "sleeping", | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"pct": 0.0029, | |
"bytes": 23937024 | |
}, | |
"share": 23539712 | |
}, | |
"cwd": "/", | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"ppid": 1 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:49:59.242-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:50:08.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:08.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 292 | |
}, | |
"system": { | |
"cpu": { | |
"softirq": { | |
"pct": 0.001 | |
}, | |
"cores": 4, | |
"user": { | |
"pct": 0.028 | |
}, | |
"total": { | |
"pct": 0.0551 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"idle": { | |
"pct": 3.9449 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"system": { | |
"pct": 0.026 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:08.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:08.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"memory": { | |
"total": 8202727424, | |
"used": { | |
"bytes": 1800065024, | |
"pct": 0.2194 | |
}, | |
"free": 6402662400, | |
"actual": { | |
"free": 7293292544, | |
"used": { | |
"pct": 0.1109, | |
"bytes": 909434880 | |
} | |
}, | |
"swap": { | |
"free": 2147479552, | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 285 | |
} | |
} | |
2018-06-19T10:50:08.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:08.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 94 | |
}, | |
"system": { | |
"load": { | |
"1": 0, | |
"5": 0.01, | |
"15": 0.05, | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
}, | |
"cores": 4 | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:50:08.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:08.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 174, | |
"name": "network", | |
"module": "system" | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"bytes": 8799203988, | |
"packets": 33944894, | |
"errors": 0, | |
"dropped": 1698 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13605293, | |
"bytes": 1539692312 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:08.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:08.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 197, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"bytes": 6592719884, | |
"packets": 1707057, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1707057, | |
"bytes": 6592719884 | |
}, | |
"name": "lo" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:08.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:08.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 203, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0 | |
}, | |
"name": "virbr0-nic", | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:50:08.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:08.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 473, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
}, | |
"name": "virbr0", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
} | |
} | |
} | |
} | |
2018-06-19T10:50:08.311-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:08.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 31241, | |
"namespace": "system.process.summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"sleeping": 189, | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 189 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:50:08.450-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 6 processes | |
2018-06-19T10:50:08.451-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 92142, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"pid": 6389, | |
"username": "root", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"cwd": "/", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 6389, | |
"state": "sleeping", | |
"memory": { | |
"size": 928202752, | |
"rss": { | |
"bytes": 30425088, | |
"pct": 0.0037 | |
}, | |
"share": 14041088 | |
}, | |
"cpu": { | |
"total": { | |
"value": 7.04697e+06, | |
"pct": 0.018, | |
"norm": { | |
"pct": 0.0045 | |
} | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
}, | |
"ppid": 1, | |
"name": "metricbeat" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:08.452-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 92179 | |
}, | |
"system": { | |
"process": { | |
"ppid": 27887, | |
"pgid": 28171, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"cpu": { | |
"total": { | |
"value": 2110, | |
"pct": 0.016, | |
"norm": { | |
"pct": 0.004 | |
} | |
}, | |
"start_time": "2018-06-19T17:48:18.000Z" | |
}, | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"cwd": "/etc/metricbeat", | |
"pid": 28171, | |
"name": "metricbeat", | |
"state": "sleeping", | |
"username": "root", | |
"memory": { | |
"size": 633507840, | |
"rss": { | |
"bytes": 26181632, | |
"pct": 0.0032 | |
}, | |
"share": 13733888 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:08.452-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"pid": 1168, | |
"state": "sleeping", | |
"username": "root", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"name": "python", | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136 | |
}, | |
"cwd": "/", | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 1, | |
"pgid": 1168, | |
"cpu": { | |
"start_time": "2018-06-12T23:29:34.000Z", | |
"total": { | |
"norm": { | |
"pct": 0.0008 | |
}, | |
"value": 1.26776e+06, | |
"pct": 0.003 | |
} | |
} | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 92185 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:08.452-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"start_time": "2018-06-12T23:29:16.000Z", | |
"total": { | |
"value": 610600, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
} | |
}, | |
"pgid": 747, | |
"name": "vmtoolsd", | |
"memory": { | |
"rss": { | |
"pct": 0.0008, | |
"bytes": 6344704 | |
}, | |
"share": 4878336, | |
"size": 312348672 | |
}, | |
"ppid": 1, | |
"state": "sleeping", | |
"cwd": "/", | |
"fd": { | |
"open": 8, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"cmdline": "/usr/bin/vmtoolsd", | |
"pid": 747, | |
"username": "root" | |
} | |
}, | |
"metricset": { | |
"rtt": 92603, | |
"name": "process", | |
"module": "system" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:08.453-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 92826 | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"username": "gdm", | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142864384, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 36 | |
}, | |
"pgid": 1674, | |
"cpu": { | |
"total": { | |
"value": 201500, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"pid": 1714, | |
"name": "gnome-shell", | |
"cmdline": "/usr/bin/gnome-shell", | |
"cwd": "/var/lib/gdm", | |
"ppid": 1674 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:08.453-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 93277, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"name": "systemd-journal", | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"cwd": "/", | |
"fd": { | |
"open": 52, | |
"limit": { | |
"hard": 16384, | |
"soft": 16384 | |
} | |
}, | |
"state": "sleeping", | |
"pgid": 509, | |
"username": "root", | |
"cpu": { | |
"start_time": "2018-06-12T23:29:04.000Z", | |
"total": { | |
"value": 45730, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
} | |
}, | |
"pid": 509, | |
"ppid": 1, | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 23945216, | |
"pct": 0.0029 | |
}, | |
"share": 23547904 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:09.241-0700 DEBUG [logstash] logstash/async.go:142 14 events out of 14 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:50:18.236-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":950,"time":952},"total":{"ticks":2120,"time":2132,"value":2120},"user":{"ticks":1170,"time":1180}},"info":{"ephemeral_id":"b8779173-060a-43f9-be93-1ad877af938a","uptime":{"ms":120057}},"memstats":{"gc_next":4461520,"memory_alloc":3751720,"memory_total":185070272,"rss":233472}},"libbeat":{"config":{"module":{"running":3}},"output":{"events":{"acked":44,"batches":3,"total":44},"read":{"bytes":18},"write":{"bytes":6158}},"pipeline":{"clients":6,"events":{"active":0,"published":44,"total":44},"queue":{"acked":44}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":20,"success":20},"process_summary":{"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-19T10:50:18.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:18.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 269, | |
"name": "cpu" | |
}, | |
"system": { | |
"cpu": { | |
"irq": { | |
"pct": 0 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.0621 | |
}, | |
"cores": 4, | |
"system": { | |
"pct": 0.0281 | |
}, | |
"idle": { | |
"pct": 3.9379 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.0271 | |
}, | |
"iowait": { | |
"pct": 0.006 | |
}, | |
"softirq": { | |
"pct": 0.001 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:50:18.241-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:18.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 869 | |
}, | |
"system": { | |
"memory": { | |
"total": 8202727424, | |
"used": { | |
"bytes": 1802354688, | |
"pct": 0.2197 | |
}, | |
"free": 6400372736, | |
"actual": { | |
"free": 7291006976, | |
"used": { | |
"pct": 0.1111, | |
"bytes": 911720448 | |
} | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:50:18.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:18.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 114 | |
}, | |
"system": { | |
"load": { | |
"cores": 4, | |
"1": 0, | |
"5": 0.01, | |
"15": 0.05, | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:18.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 193 | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"dropped": 1698, | |
"bytes": 8799581331, | |
"packets": 33945988, | |
"errors": 0 | |
}, | |
"out": { | |
"packets": 13606235, | |
"bytes": 1539784302, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:18.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 219 | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1707126, | |
"bytes": 6592977745 | |
}, | |
"name": "lo", | |
"in": { | |
"dropped": 0, | |
"bytes": 6592977745, | |
"packets": 1707126, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:18.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 227 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:18.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 527 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: / total=18746441728, used=6684000256, free=12062441472 | |
2018-06-19T10:50:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys total=0, used=0, free=0 | |
2018-06-19T10:50:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc total=0, used=0, free=0 | |
2018-06-19T10:50:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev total=4084723712, used=0, free=4084723712 | |
2018-06-19T10:50:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/security total=0, used=0, free=0 | |
2018-06-19T10:50:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/shm total=4101361664, used=81920, free=4101279744 | |
2018-06-19T10:50:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/pts total=0, used=0, free=0 | |
2018-06-19T10:50:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run total=4101361664, used=76435456, free=4024926208 | |
2018-06-19T10:50:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup total=4101361664, used=0, free=4101361664 | |
2018-06-19T10:50:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/systemd total=0, used=0, free=0 | |
2018-06-19T10:50:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/pstore total=0, used=0, free=0 | |
2018-06-19T10:50:18.246-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 716 | |
}, | |
"system": { | |
"filesystem": { | |
"used": { | |
"pct": 0.3565, | |
"bytes": 6684000256 | |
}, | |
"type": "rootfs", | |
"available": 12062441472, | |
"files": 18317312, | |
"device_name": "rootfs", | |
"mount_point": "/", | |
"total": 18746441728, | |
"free": 12062441472, | |
"free_files": 18077679 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/perf_event total=0, used=0, free=0 | |
2018-06-19T10:50:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/freezer total=0, used=0, free=0 | |
2018-06-19T10:50:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/memory total=0, used=0, free=0 | |
2018-06-19T10:50:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/pids total=0, used=0, free=0 | |
2018-06-19T10:50:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/cpu,cpuacct total=0, used=0, free=0 | |
2018-06-19T10:50:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/blkio total=0, used=0, free=0 | |
2018-06-19T10:50:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/net_cls,net_prio total=0, used=0, free=0 | |
2018-06-19T10:50:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/devices total=0, used=0, free=0 | |
2018-06-19T10:50:18.247-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/hugetlb total=0, used=0, free=0 | |
2018-06-19T10:50:18.246-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 1108 | |
}, | |
"system": { | |
"filesystem": { | |
"free": 4024926208, | |
"device_name": "tmpfs", | |
"mount_point": "/run", | |
"files": 1001309, | |
"used": { | |
"pct": 0.0186, | |
"bytes": 76435456 | |
}, | |
"type": "tmpfs", | |
"total": 4101361664, | |
"available": 4024926208, | |
"free_files": 1000766 | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:50:18.247-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/cpuset total=0, used=0, free=0 | |
2018-06-19T10:50:18.247-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/config total=0, used=0, free=0 | |
2018-06-19T10:50:18.247-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: / total=18746441728, used=6684000256, free=12062441472 | |
2018-06-19T10:50:18.247-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/sys/fs/binfmt_misc total=0, used=0, free=0 | |
2018-06-19T10:50:18.247-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/mqueue total=0, used=0, free=0 | |
2018-06-19T10:50:18.247-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/hugepages total=0, used=0, free=0 | |
2018-06-19T10:50:18.247-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 1739, | |
"name": "filesystem", | |
"module": "system" | |
}, | |
"system": { | |
"filesystem": { | |
"type": "xfs", | |
"mount_point": "/", | |
"files": 18317312, | |
"free_files": 18077679, | |
"used": { | |
"pct": 0.3565, | |
"bytes": 6684000256 | |
}, | |
"total": 18746441728, | |
"free": 12062441472, | |
"device_name": "/dev/mapper/rhel-root", | |
"available": 12062441472 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:18.247-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 1997 | |
}, | |
"system": { | |
"filesystem": { | |
"free_files": 511656, | |
"device_name": "/dev/sda1", | |
"files": 512000, | |
"used": { | |
"bytes": 281665536, | |
"pct": 0.5408 | |
}, | |
"type": "xfs", | |
"mount_point": "/boot", | |
"free": 239128576, | |
"total": 520794112, | |
"available": 239128576 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:18.247-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 2005 | |
}, | |
"system": { | |
"filesystem": { | |
"total": 0, | |
"device_name": "sunrpc", | |
"used": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"files": 0, | |
"type": "rpc_pipefs", | |
"mount_point": "/var/lib/nfs/rpc_pipefs", | |
"available": 0, | |
"free": 0, | |
"free_files": 0 | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:50:18.247-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/debug total=0, used=0, free=0 | |
2018-06-19T10:50:18.248-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/fs/nfsd total=0, used=0, free=0 | |
2018-06-19T10:50:18.248-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /boot total=520794112, used=281665536, free=239128576 | |
2018-06-19T10:50:18.248-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /var/lib/nfs/rpc_pipefs total=0, used=0, free=0 | |
2018-06-19T10:50:18.248-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/sys/fs/binfmt_misc total=0, used=0, free=0 | |
2018-06-19T10:50:18.248-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run/user/42 total=820273152, used=12288, free=820260864 | |
2018-06-19T10:50:18.248-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run/user/0 total=820273152, used=0, free=820273152 | |
2018-06-19T10:50:18.247-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"filesystem": { | |
"type": "tmpfs", | |
"free": 820260864, | |
"files": 1001309, | |
"device_name": "tmpfs", | |
"total": 820273152, | |
"available": 820260864, | |
"free_files": 1001300, | |
"used": { | |
"pct": 0, | |
"bytes": 12288 | |
}, | |
"mount_point": "/run/user/42" | |
} | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 2295 | |
} | |
} | |
2018-06-19T10:50:18.248-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 2301 | |
}, | |
"system": { | |
"filesystem": { | |
"type": "tmpfs", | |
"free": 820273152, | |
"available": 820273152, | |
"mount_point": "/run/user/0", | |
"files": 1001309, | |
"free_files": 1001308, | |
"used": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"device_name": "tmpfs", | |
"total": 820273152 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:18.249-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 2742, | |
"name": "fsstat" | |
}, | |
"system": { | |
"fsstat": { | |
"count": 31, | |
"total_files": 24833104, | |
"total_size": { | |
"total": 37296590848, | |
"free": 30254395392, | |
"used": 7042195456 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:50:18.319-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:18.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 190, | |
"sleeping": 190, | |
"running": 0, | |
"idle": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 39170, | |
"namespace": "system.process.summary" | |
} | |
} | |
2018-06-19T10:50:18.488-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T10:50:18.490-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"pid": 28171, | |
"name": "metricbeat", | |
"state": "sleeping", | |
"memory": { | |
"size": 633507840, | |
"rss": { | |
"pct": 0.0032, | |
"bytes": 26210304 | |
}, | |
"share": 13742080 | |
}, | |
"cwd": "/etc/metricbeat", | |
"cpu": { | |
"total": { | |
"value": 2320, | |
"pct": 0.0209, | |
"norm": { | |
"pct": 0.0052 | |
} | |
}, | |
"start_time": "2018-06-19T17:48:18.000Z" | |
}, | |
"username": "root", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 27887, | |
"pgid": 28171 | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 130513 | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:50:18.490-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 130562, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"username": "root", | |
"cpu": { | |
"start_time": "2018-06-14T16:41:30.000Z", | |
"total": { | |
"pct": 0.0179, | |
"norm": { | |
"pct": 0.0045 | |
}, | |
"value": 7.04715e+06 | |
} | |
}, | |
"memory": { | |
"size": 928202752, | |
"rss": { | |
"pct": 0.0037, | |
"bytes": 30425088 | |
}, | |
"share": 14041088 | |
}, | |
"ppid": 1, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 6 | |
}, | |
"pgid": 6389, | |
"name": "metricbeat", | |
"state": "sleeping", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"cwd": "/", | |
"pid": 6389 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:18.490-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 130572 | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
}, | |
"system": { | |
"process": { | |
"name": "vmtoolsd", | |
"state": "sleeping", | |
"username": "root", | |
"cwd": "/", | |
"fd": { | |
"open": 8, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 1, | |
"cmdline": "/usr/bin/vmtoolsd", | |
"pgid": 747, | |
"pid": 747, | |
"memory": { | |
"size": 312348672, | |
"rss": { | |
"bytes": 6344704, | |
"pct": 0.0008 | |
}, | |
"share": 4878336 | |
}, | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0005 | |
}, | |
"value": 610620, | |
"pct": 0.002 | |
}, | |
"start_time": "2018-06-12T23:29:16.000Z" | |
} | |
} | |
} | |
} | |
2018-06-19T10:50:18.491-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 131293 | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"share": 2699264, | |
"size": 51286016, | |
"rss": { | |
"bytes": 8130560, | |
"pct": 0.001 | |
} | |
}, | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"value": 690870, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"ppid": 1171, | |
"pid": 1319, | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"fd": { | |
"open": 4, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"username": "xymon", | |
"name": "xymond", | |
"state": "sleeping", | |
"pgid": 1171 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:18.491-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 131333, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"username": "root", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"cpu": { | |
"total": { | |
"value": 1.26778e+06, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"pid": 1168, | |
"state": "sleeping", | |
"cwd": "/", | |
"ppid": 1, | |
"pgid": 1168, | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"name": "python", | |
"memory": { | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136, | |
"size": 1634631680 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:18.491-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"pgid": 1674, | |
"name": "gnome-shell", | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142864384, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"state": "sleeping", | |
"pid": 1714, | |
"username": "gdm", | |
"cwd": "/var/lib/gdm", | |
"cmdline": "/usr/bin/gnome-shell", | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 201500 | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 36 | |
}, | |
"ppid": 1674 | |
} | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 131342, | |
"name": "process" | |
} | |
} | |
2018-06-19T10:50:18.492-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 132179 | |
}, | |
"system": { | |
"process": { | |
"cwd": "/", | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"username": "root", | |
"state": "sleeping", | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"cpu": { | |
"start_time": "2018-06-12T23:29:04.000Z", | |
"total": { | |
"value": 45730, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
} | |
}, | |
"pid": 509, | |
"ppid": 1, | |
"name": "systemd-journal", | |
"memory": { | |
"rss": { | |
"bytes": 23945216, | |
"pct": 0.0029 | |
}, | |
"share": 23547904, | |
"size": 62988288 | |
}, | |
"pgid": 509 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:19.243-0700 DEBUG [logstash] logstash/async.go:142 23 events out of 23 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:50:28.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:28.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"cpu": { | |
"cores": 4, | |
"user": { | |
"pct": 0.0271 | |
}, | |
"total": { | |
"pct": 0.0511 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"system": { | |
"pct": 0.0241 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"idle": { | |
"pct": 3.9489 | |
}, | |
"irq": { | |
"pct": 0 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
}, | |
"metricset": { | |
"rtt": 219, | |
"name": "cpu", | |
"module": "system" | |
} | |
} | |
2018-06-19T10:50:28.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:28.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 292, | |
"name": "memory" | |
}, | |
"system": { | |
"memory": { | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
}, | |
"total": 8202727424, | |
"used": { | |
"pct": 0.2195, | |
"bytes": 1800114176 | |
}, | |
"free": 6402613248, | |
"actual": { | |
"free": 7293255680, | |
"used": { | |
"bytes": 909471744, | |
"pct": 0.1109 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:28.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 83, | |
"name": "load" | |
}, | |
"system": { | |
"load": { | |
"15": 0.05, | |
"norm": { | |
"15": 0.0125, | |
"1": 0, | |
"5": 0.0025 | |
}, | |
"cores": 4, | |
"1": 0, | |
"5": 0.01 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:28.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8799622845, | |
"packets": 33946516 | |
}, | |
"out": { | |
"bytes": 1539837271, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13606465 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 165 | |
} | |
} | |
2018-06-19T10:50:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:28.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 186, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6593050666, | |
"packets": 1707182 | |
}, | |
"out": { | |
"packets": 1707182, | |
"bytes": 6593050666, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:28.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 197 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:50:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:28.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 457 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:50:28.315-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:28.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 35122, | |
"namespace": "system.process.summary", | |
"name": "process_summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"zombie": 0, | |
"unknown": 0, | |
"total": 189, | |
"sleeping": 189, | |
"running": 0, | |
"idle": 0, | |
"stopped": 0 | |
} | |
} | |
} | |
} | |
2018-06-19T10:50:28.450-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T10:50:28.452-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 92417 | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"start_time": "2018-06-14T16:41:30.000Z", | |
"total": { | |
"value": 7.04733e+06, | |
"pct": 0.0181, | |
"norm": { | |
"pct": 0.0045 | |
} | |
} | |
}, | |
"fd": { | |
"open": 6, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"pgid": 6389, | |
"name": "metricbeat", | |
"username": "root", | |
"memory": { | |
"share": 14041088, | |
"size": 928202752, | |
"rss": { | |
"bytes": 30425088, | |
"pct": 0.0037 | |
} | |
}, | |
"pid": 6389, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"ppid": 1, | |
"state": "sleeping", | |
"cwd": "/" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:28.452-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 92447, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"pgid": 28171, | |
"pid": 28171, | |
"username": "root", | |
"memory": { | |
"rss": { | |
"bytes": 26226688, | |
"pct": 0.0032 | |
}, | |
"share": 13742080, | |
"size": 633507840 | |
}, | |
"name": "metricbeat", | |
"state": "sleeping", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"cpu": { | |
"total": { | |
"pct": 0.0171, | |
"norm": { | |
"pct": 0.0043 | |
}, | |
"value": 2490 | |
}, | |
"start_time": "2018-06-19T17:48:18.000Z" | |
}, | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"cwd": "/etc/metricbeat", | |
"ppid": 27887 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:28.452-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 92452 | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 373985280, | |
"rss": { | |
"bytes": 10014720, | |
"pct": 0.0012 | |
}, | |
"share": 4067328 | |
}, | |
"pid": 704, | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"value": 277470, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:12.000Z" | |
}, | |
"pgid": 704, | |
"fd": { | |
"open": 8, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"name": "graylog-collect", | |
"username": "root", | |
"ppid": 1, | |
"state": "sleeping", | |
"cmdline": "/usr/bin/graylog-collector-sidecar" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:28.452-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 92928 | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"name": "python", | |
"username": "root", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"cwd": "/", | |
"pid": 1168, | |
"ppid": 1, | |
"state": "sleeping", | |
"pgid": 1168, | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136 | |
}, | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0005 | |
}, | |
"value": 1.2678e+06, | |
"pct": 0.002 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:28.452-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 93056, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"memory": { | |
"size": 42385408, | |
"rss": { | |
"bytes": 2985984, | |
"pct": 0.0004 | |
}, | |
"share": 1708032 | |
}, | |
"cpu": { | |
"total": { | |
"value": 10630, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
}, | |
"start_time": "2018-06-12T23:30:36.000Z" | |
}, | |
"ppid": 1551, | |
"pgid": 1171, | |
"fd": { | |
"open": 5, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 1983, | |
"username": "xymon", | |
"cwd": "/", | |
"name": "xymond_alert", | |
"cmdline": "xymond_alert --checkpoint-file=/var/lib/xymon/tmp/alert.chk --checkpoint-interval=600" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:50:28.453-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 93207 | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 36, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"ppid": 1674, | |
"name": "gnome-shell", | |
"username": "gdm", | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142864384, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"cpu": { | |
"start_time": "2018-06-12T23:29:50.000Z", | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 201500 | |
} | |
}, | |
"cwd": "/var/lib/gdm", | |
"state": "sleeping", | |
"cmdline": "/usr/bin/gnome-shell", | |
"pid": 1714, | |
"pgid": 1674 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:28.453-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"pid": 509, | |
"state": "sleeping", | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"cwd": "/", | |
"fd": { | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
}, | |
"open": 52 | |
}, | |
"name": "systemd-journal", | |
"username": "root", | |
"cpu": { | |
"start_time": "2018-06-12T23:29:04.000Z", | |
"total": { | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 45730, | |
"pct": 0 | |
} | |
}, | |
"pgid": 509, | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 23945216, | |
"pct": 0.0029 | |
}, | |
"share": 23547904 | |
}, | |
"ppid": 1 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 93345, | |
"name": "process" | |
} | |
} | |
2018-06-19T10:50:29.242-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:50:38.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:38.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"cpu": { | |
"steal": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.022 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"cores": 4, | |
"system": { | |
"pct": 0.016 | |
}, | |
"idle": { | |
"pct": 3.9619 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.0381 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 213 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:38.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:38.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 403 | |
}, | |
"system": { | |
"memory": { | |
"actual": { | |
"used": { | |
"pct": 0.1109, | |
"bytes": 909471744 | |
}, | |
"free": 7293255680 | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1800114176, | |
"pct": 0.2195 | |
}, | |
"free": 6402613248 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:38.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"load": { | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
}, | |
"cores": 4, | |
"1": 0, | |
"5": 0.01, | |
"15": 0.05 | |
} | |
}, | |
"metricset": { | |
"rtt": 116, | |
"name": "load", | |
"module": "system" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:38.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"dropped": 1698, | |
"bytes": 8799649888, | |
"packets": 33946876, | |
"errors": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 13606497, | |
"bytes": 1539861291, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
}, | |
"metricset": { | |
"rtt": 169, | |
"name": "network", | |
"module": "system" | |
} | |
} | |
2018-06-19T10:50:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:38.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 193 | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"bytes": 6593050666, | |
"packets": 1707182, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1707182, | |
"bytes": 6593050666 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:50:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:38.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 199 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0 | |
}, | |
"out": { | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:38.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 421, | |
"name": "network", | |
"module": "system" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:50:38.314-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:38.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 34244, | |
"namespace": "system.process.summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 189, | |
"sleeping": 189, | |
"running": 0, | |
"idle": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:38.449-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T10:50:38.452-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"cwd": "/", | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0043 | |
}, | |
"value": 7.0475e+06, | |
"pct": 0.017 | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
}, | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 6389, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"name": "metricbeat", | |
"username": "root", | |
"memory": { | |
"size": 928202752, | |
"rss": { | |
"pct": 0.0037, | |
"bytes": 30425088 | |
}, | |
"share": 14041088 | |
}, | |
"pgid": 6389, | |
"ppid": 1 | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 92481 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:38.452-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 92510 | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"name": "metricbeat", | |
"memory": { | |
"size": 633507840, | |
"rss": { | |
"bytes": 26234880, | |
"pct": 0.0032 | |
}, | |
"share": 13742080 | |
}, | |
"pgid": 28171, | |
"state": "sleeping", | |
"username": "root", | |
"cwd": "/etc/metricbeat", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"cpu": { | |
"total": { | |
"pct": 0.016, | |
"norm": { | |
"pct": 0.004 | |
}, | |
"value": 2650 | |
}, | |
"start_time": "2018-06-19T17:48:18.000Z" | |
}, | |
"pid": 28171, | |
"ppid": 27887 | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:50:38.452-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 92516, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"start_time": "2018-06-12T23:29:16.000Z", | |
"total": { | |
"value": 610640, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
} | |
}, | |
"fd": { | |
"open": 8, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 747, | |
"state": "sleeping", | |
"cwd": "/", | |
"memory": { | |
"share": 4878336, | |
"size": 312348672, | |
"rss": { | |
"bytes": 6344704, | |
"pct": 0.0008 | |
} | |
}, | |
"cmdline": "/usr/bin/vmtoolsd", | |
"username": "root", | |
"name": "vmtoolsd", | |
"pid": 747, | |
"ppid": 1 | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:50:38.452-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"total": { | |
"value": 690900, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"pid": 1319, | |
"pgid": 1171, | |
"name": "xymond", | |
"cwd": "/", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 4 | |
}, | |
"ppid": 1171, | |
"memory": { | |
"size": 51286016, | |
"rss": { | |
"bytes": 8130560, | |
"pct": 0.001 | |
}, | |
"share": 2699264 | |
}, | |
"state": "sleeping", | |
"username": "xymon", | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 92917 | |
} | |
} | |
2018-06-19T10:50:38.452-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 92932, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"ppid": 1, | |
"cwd": "/", | |
"username": "root", | |
"pid": 1168, | |
"state": "sleeping", | |
"memory": { | |
"share": 11227136, | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
} | |
}, | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"cpu": { | |
"start_time": "2018-06-12T23:29:34.000Z", | |
"total": { | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
}, | |
"value": 1.26782e+06 | |
} | |
}, | |
"pgid": 1168, | |
"name": "python" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:38.453-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"cwd": "/var/lib/gdm", | |
"state": "sleeping", | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142864384, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"cpu": { | |
"start_time": "2018-06-12T23:29:50.000Z", | |
"total": { | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 201500, | |
"pct": 0 | |
} | |
}, | |
"ppid": 1674, | |
"fd": { | |
"open": 36, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"cmdline": "/usr/bin/gnome-shell", | |
"pid": 1714, | |
"pgid": 1674, | |
"name": "gnome-shell", | |
"username": "gdm" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 93181 | |
} | |
} | |
2018-06-19T10:50:38.453-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"pid": 509, | |
"ppid": 1, | |
"cpu": { | |
"start_time": "2018-06-12T23:29:04.000Z", | |
"total": { | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 45730, | |
"pct": 0 | |
} | |
}, | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"pgid": 509, | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 23945216, | |
"pct": 0.0029 | |
}, | |
"share": 23547904 | |
}, | |
"username": "root", | |
"cwd": "/", | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"name": "systemd-journal", | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 93327 | |
} | |
} | |
2018-06-19T10:50:39.241-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:50:48.236-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":1180,"time":1187},"total":{"ticks":2660,"time":2669,"value":2660},"user":{"ticks":1480,"time":1482}},"info":{"ephemeral_id":"b8779173-060a-43f9-be93-1ad877af938a","uptime":{"ms":150057}},"memstats":{"gc_next":4587072,"memory_alloc":3978896,"memory_total":229973704,"rss":49152}},"libbeat":{"config":{"module":{"running":3}},"output":{"events":{"acked":53,"batches":3,"total":53},"read":{"bytes":18},"write":{"bytes":7046}},"pipeline":{"clients":6,"events":{"active":0,"filtered":26,"published":53,"total":79},"queue":{"acked":53}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"filesystem":{"events":33,"success":33},"fsstat":{"events":1,"success":1},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":21,"success":21},"process_summary":{"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-19T10:50:48.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:48.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"cpu": { | |
"softirq": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.028 | |
}, | |
"system": { | |
"pct": 0.03 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"idle": { | |
"pct": 3.9419 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.0581 | |
}, | |
"cores": 4 | |
} | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 191 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:48.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:48.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 581 | |
}, | |
"system": { | |
"memory": { | |
"used": { | |
"bytes": 1799634944, | |
"pct": 0.2194 | |
}, | |
"free": 6403092480, | |
"actual": { | |
"free": 7293739008, | |
"used": { | |
"pct": 0.1108, | |
"bytes": 908988416 | |
} | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
}, | |
"total": 8202727424 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:48.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:48.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"load": { | |
"cores": 4, | |
"1": 0, | |
"5": 0.01, | |
"15": 0.05, | |
"norm": { | |
"15": 0.0125, | |
"1": 0, | |
"5": 0.0025 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 97 | |
} | |
} | |
2018-06-19T10:50:48.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:48.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 264, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"bytes": 8799910838, | |
"packets": 33947227, | |
"errors": 0, | |
"dropped": 1698 | |
}, | |
"out": { | |
"bytes": 1539894047, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13606638 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:50:48.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:48.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"bytes": 6593300567, | |
"packets": 1707225, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1707225, | |
"bytes": 6593300567 | |
}, | |
"name": "lo" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 275, | |
"name": "network", | |
"module": "system" | |
} | |
} | |
2018-06-19T10:50:48.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:48.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 282 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:48.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:48.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 716 | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"name": "virbr0" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:48.311-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:48.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 189, | |
"sleeping": 189 | |
} | |
} | |
}, | |
"metricset": { | |
"rtt": 31130, | |
"namespace": "system.process.summary", | |
"name": "process_summary", | |
"module": "system" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:48.451-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T10:50:48.453-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 94125 | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"state": "sleeping", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"pid": 28171, | |
"pgid": 28171, | |
"name": "metricbeat", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.004 | |
}, | |
"value": 2810, | |
"pct": 0.016 | |
}, | |
"start_time": "2018-06-19T17:48:18.000Z" | |
}, | |
"username": "root", | |
"memory": { | |
"rss": { | |
"bytes": 26275840, | |
"pct": 0.0032 | |
}, | |
"share": 13770752, | |
"size": 633507840 | |
}, | |
"cwd": "/etc/metricbeat", | |
"ppid": 27887 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:48.454-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 94140, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"cwd": "/", | |
"pgid": 6389, | |
"name": "metricbeat", | |
"state": "sleeping", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"memory": { | |
"rss": { | |
"bytes": 30425088, | |
"pct": 0.0037 | |
}, | |
"share": 14041088, | |
"size": 928202752 | |
}, | |
"ppid": 1, | |
"username": "root", | |
"cpu": { | |
"start_time": "2018-06-14T16:41:30.000Z", | |
"total": { | |
"value": 7.04765e+06, | |
"pct": 0.015, | |
"norm": { | |
"pct": 0.0037 | |
} | |
} | |
}, | |
"pid": 6389 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:48.454-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 94144 | |
}, | |
"system": { | |
"process": { | |
"username": "root", | |
"cwd": "/", | |
"ppid": 1, | |
"state": "sleeping", | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 1168, | |
"pgid": 1168, | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136 | |
}, | |
"name": "python", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"cpu": { | |
"total": { | |
"value": 1.26784e+06, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:48.454-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 94527 | |
}, | |
"system": { | |
"process": { | |
"name": "avahi-daemon", | |
"fd": { | |
"open": 15, | |
"limit": { | |
"soft": 768, | |
"hard": 768 | |
} | |
}, | |
"pgid": 739, | |
"cpu": { | |
"total": { | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0002 | |
}, | |
"value": 2180 | |
}, | |
"start_time": "2018-06-12T23:29:15.000Z" | |
}, | |
"ppid": 1, | |
"username": "avahi", | |
"memory": { | |
"size": 30920704, | |
"rss": { | |
"pct": 0.0002, | |
"bytes": 1785856 | |
}, | |
"share": 1478656 | |
}, | |
"cwd": "/etc/avahi", | |
"pid": 739, | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:48.454-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"name": "xymond", | |
"pgid": 1171, | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0002 | |
}, | |
"value": 690910, | |
"pct": 0.001 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 4 | |
}, | |
"state": "sleeping", | |
"username": "xymon", | |
"ppid": 1171, | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"cwd": "/", | |
"pid": 1319, | |
"memory": { | |
"share": 2699264, | |
"size": 51286016, | |
"rss": { | |
"bytes": 8130560, | |
"pct": 0.001 | |
} | |
} | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 94675 | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:50:48.454-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 94810 | |
}, | |
"system": { | |
"process": { | |
"cwd": "/var/lib/gdm", | |
"pid": 1714, | |
"name": "gnome-shell", | |
"state": "sleeping", | |
"ppid": 1674, | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"cpu": { | |
"start_time": "2018-06-12T23:29:50.000Z", | |
"total": { | |
"value": 201500, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
} | |
}, | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142864384, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"cmdline": "/usr/bin/gnome-shell", | |
"pgid": 1674, | |
"username": "gdm" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:48.454-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 94948 | |
}, | |
"system": { | |
"process": { | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"cwd": "/", | |
"ppid": 1, | |
"pgid": 509, | |
"name": "systemd-journal", | |
"username": "root", | |
"pid": 509, | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 45730, | |
"pct": 0 | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"memory": { | |
"rss": { | |
"bytes": 23945216, | |
"pct": 0.0029 | |
}, | |
"share": 23547904, | |
"size": 62988288 | |
}, | |
"fd": { | |
"open": 52, | |
"limit": { | |
"hard": 16384, | |
"soft": 16384 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:49.242-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:50:58.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:58.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 417 | |
}, | |
"system": { | |
"cpu": { | |
"total": { | |
"pct": 0.0391 | |
}, | |
"cores": 4, | |
"user": { | |
"pct": 0.023 | |
}, | |
"system": { | |
"pct": 0.016 | |
}, | |
"idle": { | |
"pct": 3.9609 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:58.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:58.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 539, | |
"name": "memory" | |
}, | |
"system": { | |
"memory": { | |
"free": 6402916352, | |
"actual": { | |
"free": 7293562880, | |
"used": { | |
"pct": 0.1108, | |
"bytes": 909164544 | |
} | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1799811072, | |
"pct": 0.2194 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:58.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:58.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 100 | |
}, | |
"system": { | |
"load": { | |
"5": 0.01, | |
"15": 0.05, | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
}, | |
"cores": 4, | |
"1": 0 | |
} | |
} | |
} | |
2018-06-19T10:50:58.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:58.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 153 | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"bytes": 8799936829, | |
"packets": 33947559, | |
"errors": 0, | |
"dropped": 1698 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 13606669, | |
"bytes": 1539916776, | |
"errors": 0 | |
}, | |
"name": "ens192" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:58.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:58.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 173 | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"packets": 1707225, | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6593300567 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1707225, | |
"bytes": 6593300567 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:58.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:58.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 179 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:58.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:58.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 412 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:58.313-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:58.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 33497, | |
"namespace": "system.process.summary", | |
"name": "process_summary", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"total": 189, | |
"sleeping": 188, | |
"running": 1, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:58.461-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T10:50:58.462-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"pid": 28171, | |
"username": "root", | |
"cwd": "/etc/metricbeat", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 28171, | |
"ppid": 27887, | |
"name": "metricbeat", | |
"state": "sleeping", | |
"memory": { | |
"size": 709009408, | |
"rss": { | |
"pct": 0.0035, | |
"bytes": 28393472 | |
}, | |
"share": 13770752 | |
}, | |
"cpu": { | |
"start_time": "2018-06-19T17:48:18.000Z", | |
"total": { | |
"value": 2980, | |
"pct": 0.017, | |
"norm": { | |
"pct": 0.0042 | |
} | |
} | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 103121 | |
} | |
} | |
2018-06-19T10:50:58.463-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 103150 | |
}, | |
"system": { | |
"process": { | |
"cwd": "/", | |
"pgid": 6389, | |
"name": "metricbeat", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"memory": { | |
"size": 928202752, | |
"rss": { | |
"bytes": 30425088, | |
"pct": 0.0037 | |
}, | |
"share": 14041088 | |
}, | |
"state": "sleeping", | |
"cpu": { | |
"start_time": "2018-06-14T16:41:30.000Z", | |
"total": { | |
"value": 7.04782e+06, | |
"pct": 0.017, | |
"norm": { | |
"pct": 0.0042 | |
} | |
} | |
}, | |
"pid": 6389, | |
"ppid": 1, | |
"username": "root" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:58.463-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 103156 | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"pid": 1168, | |
"name": "python", | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0007 | |
}, | |
"value": 1.26787e+06, | |
"pct": 0.003 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"username": "root", | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"pct": 0.0062, | |
"bytes": 51044352 | |
}, | |
"share": 11227136 | |
}, | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 1, | |
"pgid": 1168 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:58.463-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 103616 | |
}, | |
"system": { | |
"process": { | |
"pid": 428, | |
"memory": { | |
"size": 0, | |
"rss": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"share": 0 | |
}, | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"value": 221800, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0002 | |
} | |
}, | |
"start_time": "2018-06-12T23:28:53.000Z" | |
}, | |
"username": "root", | |
"fd": { | |
"open": 0, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"name": "xfsaild/dm-0", | |
"ppid": 2, | |
"pgid": 0, | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:50:58.463-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 103745 | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 4, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"username": "xymon", | |
"memory": { | |
"size": 51286016, | |
"rss": { | |
"bytes": 8130560, | |
"pct": 0.001 | |
}, | |
"share": 2699264 | |
}, | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"cpu": { | |
"total": { | |
"value": 690920, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0002 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"ppid": 1171, | |
"state": "sleeping", | |
"cwd": "/", | |
"pid": 1319, | |
"pgid": 1171, | |
"name": "xymond" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:50:58.463-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 103949 | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"memory": { | |
"rss": { | |
"bytes": 142864384, | |
"pct": 0.0174 | |
}, | |
"share": 48148480, | |
"size": 2004910080 | |
}, | |
"ppid": 1674, | |
"pgid": 1674, | |
"cmdline": "/usr/bin/gnome-shell", | |
"cwd": "/var/lib/gdm", | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 201500 | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"fd": { | |
"open": 36, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"pid": 1714, | |
"name": "gnome-shell", | |
"username": "gdm" | |
} | |
} | |
} | |
2018-06-19T10:50:58.463-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:50:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 104091 | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"start_time": "2018-06-12T23:29:04.000Z", | |
"total": { | |
"value": 45730, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
} | |
}, | |
"pgid": 509, | |
"pid": 509, | |
"memory": { | |
"share": 23547904, | |
"size": 62988288, | |
"rss": { | |
"bytes": 23945216, | |
"pct": 0.0029 | |
} | |
}, | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"cwd": "/", | |
"ppid": 1, | |
"state": "sleeping", | |
"username": "root", | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"name": "systemd-journal" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:50:59.243-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:51:08.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:08.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 244 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"cpu": { | |
"nice": { | |
"pct": 0 | |
}, | |
"system": { | |
"pct": 0.017 | |
}, | |
"idle": { | |
"pct": 3.9579 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.0421 | |
}, | |
"cores": 4, | |
"user": { | |
"pct": 0.024 | |
}, | |
"softirq": { | |
"pct": 0.001 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"steal": { | |
"pct": 0 | |
} | |
} | |
} | |
} | |
2018-06-19T10:51:08.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:08.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"memory": { | |
"total": 8202727424, | |
"used": { | |
"bytes": 1802072064, | |
"pct": 0.2197 | |
}, | |
"free": 6400655360, | |
"actual": { | |
"free": 7291305984, | |
"used": { | |
"pct": 0.1111, | |
"bytes": 911421440 | |
} | |
}, | |
"swap": { | |
"used": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"free": 2147479552, | |
"total": 2147479552 | |
} | |
} | |
}, | |
"metricset": { | |
"rtt": 282, | |
"name": "memory", | |
"module": "system" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:08.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:08.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 78, | |
"name": "load" | |
}, | |
"system": { | |
"load": { | |
"cores": 4, | |
"1": 0, | |
"5": 0.01, | |
"15": 0.05, | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:08.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:08.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 174 | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"bytes": 8800312059, | |
"packets": 33947997, | |
"errors": 0, | |
"dropped": 1698 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 13606863, | |
"bytes": 1539950928, | |
"errors": 0 | |
}, | |
"name": "ens192" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:08.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:08.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 196, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"dropped": 0, | |
"bytes": 6593599962, | |
"packets": 1707270, | |
"errors": 0 | |
}, | |
"out": { | |
"packets": 1707270, | |
"bytes": 6593599962, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:08.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:08.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 202 | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0 | |
}, | |
"name": "virbr0-nic" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:08.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:08.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 468 | |
} | |
} | |
2018-06-19T10:51:08.315-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:08.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 189, | |
"sleeping": 189, | |
"running": 0 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 35515, | |
"namespace": "system.process.summary" | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:51:08.464-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T10:51:08.466-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 106905 | |
}, | |
"system": { | |
"process": { | |
"username": "root", | |
"cwd": "/etc/metricbeat", | |
"ppid": 27887, | |
"name": "metricbeat", | |
"pid": 28171, | |
"pgid": 28171, | |
"state": "sleeping", | |
"memory": { | |
"rss": { | |
"pct": 0.0035, | |
"bytes": 28405760 | |
}, | |
"share": 13770752, | |
"size": 709009408 | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"cpu": { | |
"total": { | |
"value": 3150, | |
"pct": 0.017, | |
"norm": { | |
"pct": 0.0042 | |
} | |
}, | |
"start_time": "2018-06-19T17:48:18.000Z" | |
}, | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:51:08.466-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 106935 | |
}, | |
"system": { | |
"process": { | |
"name": "metricbeat", | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"value": 7.04798e+06, | |
"pct": 0.016, | |
"norm": { | |
"pct": 0.004 | |
} | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
}, | |
"ppid": 1, | |
"memory": { | |
"size": 928202752, | |
"rss": { | |
"bytes": 30429184, | |
"pct": 0.0037 | |
}, | |
"share": 14041088 | |
}, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 6 | |
}, | |
"pgid": 6389, | |
"cwd": "/", | |
"username": "root", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"pid": 6389 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:08.466-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 106941 | |
}, | |
"system": { | |
"process": { | |
"name": "vmtoolsd", | |
"cwd": "/", | |
"state": "sleeping", | |
"username": "root", | |
"memory": { | |
"size": 312348672, | |
"rss": { | |
"bytes": 6344704, | |
"pct": 0.0008 | |
}, | |
"share": 4878336 | |
}, | |
"pid": 747, | |
"fd": { | |
"open": 8, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"cmdline": "/usr/bin/vmtoolsd", | |
"ppid": 1, | |
"pgid": 747, | |
"cpu": { | |
"total": { | |
"value": 610670, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:16.000Z" | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:08.467-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 107328 | |
}, | |
"system": { | |
"process": { | |
"ppid": 1171, | |
"cpu": { | |
"total": { | |
"value": 690940, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"memory": { | |
"size": 51286016, | |
"rss": { | |
"pct": 0.001, | |
"bytes": 8130560 | |
}, | |
"share": 2699264 | |
}, | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"cwd": "/", | |
"pid": 1319, | |
"pgid": 1171, | |
"name": "xymond", | |
"state": "sleeping", | |
"username": "xymon", | |
"fd": { | |
"open": 4, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:51:08.467-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"cwd": "/", | |
"ppid": 1, | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0005 | |
}, | |
"value": 1.26789e+06, | |
"pct": 0.002 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"pid": 1168, | |
"username": "root", | |
"name": "python", | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136 | |
}, | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"state": "sleeping", | |
"pgid": 1168 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 107344 | |
} | |
} | |
2018-06-19T10:51:08.467-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 107586, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"cwd": "/var/lib/gdm", | |
"pgid": 1674, | |
"name": "gnome-shell", | |
"cmdline": "/usr/bin/gnome-shell", | |
"state": "sleeping", | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142864384, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 36 | |
}, | |
"pid": 1714, | |
"cpu": { | |
"start_time": "2018-06-12T23:29:50.000Z", | |
"total": { | |
"value": 201510, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
} | |
}, | |
"ppid": 1674, | |
"username": "gdm" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:08.467-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 107620, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"username": "root", | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 23945216, | |
"pct": 0.0029 | |
}, | |
"share": 23547904 | |
}, | |
"name": "systemd-journal", | |
"state": "sleeping", | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"cwd": "/", | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"pgid": 509, | |
"pid": 509, | |
"ppid": 1, | |
"cpu": { | |
"total": { | |
"value": 45730, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
} | |
} | |
} | |
} | |
2018-06-19T10:51:09.243-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:51:18.236-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":1400,"time":1407},"total":{"ticks":3170,"time":3178,"value":3170},"user":{"ticks":1770,"time":1771}},"info":{"ephemeral_id":"b8779173-060a-43f9-be93-1ad877af938a","uptime":{"ms":180057}},"memstats":{"gc_next":7299856,"memory_alloc":3680024,"memory_total":274522144,"rss":2170880}},"libbeat":{"config":{"module":{"running":3}},"output":{"events":{"acked":45,"batches":3,"total":45},"read":{"bytes":18},"write":{"bytes":6378}},"pipeline":{"clients":6,"events":{"active":0,"published":45,"total":45},"queue":{"acked":45}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":21,"success":21},"process_summary":{"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-19T10:51:18.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:18.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 148, | |
"name": "cpu" | |
}, | |
"system": { | |
"cpu": { | |
"irq": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.0541 | |
}, | |
"cores": 4, | |
"user": { | |
"pct": 0.028 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"system": { | |
"pct": 0.025 | |
}, | |
"idle": { | |
"pct": 3.9459 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0.001 | |
} | |
} | |
} | |
} | |
2018-06-19T10:51:18.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:18.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 236 | |
}, | |
"system": { | |
"memory": { | |
"swap": { | |
"free": 2147479552, | |
"total": 2147479552, | |
"used": { | |
"pct": 0, | |
"bytes": 0 | |
} | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1804275712, | |
"pct": 0.22 | |
}, | |
"free": 6398451712, | |
"actual": { | |
"free": 7289114624, | |
"used": { | |
"pct": 0.1114, | |
"bytes": 913612800 | |
} | |
} | |
} | |
} | |
} | |
2018-06-19T10:51:18.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:18.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 91 | |
}, | |
"system": { | |
"load": { | |
"15": 0.05, | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
}, | |
"cores": 4, | |
"1": 0, | |
"5": 0.01 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:18.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 160, | |
"name": "network", | |
"module": "system" | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"dropped": 0, | |
"packets": 13607760, | |
"bytes": 1540040094, | |
"errors": 0 | |
}, | |
"name": "ens192", | |
"in": { | |
"bytes": 8800665214, | |
"packets": 33949528, | |
"errors": 0, | |
"dropped": 1698 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:18.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 181 | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1707327, | |
"bytes": 6593816414 | |
}, | |
"name": "lo", | |
"in": { | |
"dropped": 0, | |
"bytes": 6593816414, | |
"packets": 1707327, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:18.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 188, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:51:18.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 404 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: / total=18746441728, used=6683959296, free=12062482432 | |
2018-06-19T10:51:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys total=0, used=0, free=0 | |
2018-06-19T10:51:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc total=0, used=0, free=0 | |
2018-06-19T10:51:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev total=4084723712, used=0, free=4084723712 | |
2018-06-19T10:51:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/security total=0, used=0, free=0 | |
2018-06-19T10:51:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/shm total=4101361664, used=81920, free=4101279744 | |
2018-06-19T10:51:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/pts total=0, used=0, free=0 | |
2018-06-19T10:51:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run total=4101361664, used=76435456, free=4024926208 | |
2018-06-19T10:51:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup total=4101361664, used=0, free=4101361664 | |
2018-06-19T10:51:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/systemd total=0, used=0, free=0 | |
2018-06-19T10:51:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/pstore total=0, used=0, free=0 | |
2018-06-19T10:51:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/perf_event total=0, used=0, free=0 | |
2018-06-19T10:51:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/freezer total=0, used=0, free=0 | |
2018-06-19T10:51:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/memory total=0, used=0, free=0 | |
2018-06-19T10:51:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/pids total=0, used=0, free=0 | |
2018-06-19T10:51:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/cpu,cpuacct total=0, used=0, free=0 | |
2018-06-19T10:51:18.246-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 479, | |
"name": "filesystem" | |
}, | |
"system": { | |
"filesystem": { | |
"files": 18317312, | |
"used": { | |
"pct": 0.3565, | |
"bytes": 6683959296 | |
}, | |
"mount_point": "/", | |
"device_name": "rootfs", | |
"total": 18746441728, | |
"type": "rootfs", | |
"free": 12062482432, | |
"available": 12062482432, | |
"free_files": 18077679 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/blkio total=0, used=0, free=0 | |
2018-06-19T10:51:18.246-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"filesystem": { | |
"available": 4024926208, | |
"free_files": 1000766, | |
"device_name": "tmpfs", | |
"mount_point": "/run", | |
"free": 4024926208, | |
"used": { | |
"pct": 0.0186, | |
"bytes": 76435456 | |
}, | |
"type": "tmpfs", | |
"total": 4101361664, | |
"files": 1001309 | |
} | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 747, | |
"name": "filesystem" | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:51:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/net_cls,net_prio total=0, used=0, free=0 | |
2018-06-19T10:51:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/devices total=0, used=0, free=0 | |
2018-06-19T10:51:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/hugetlb total=0, used=0, free=0 | |
2018-06-19T10:51:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/cpuset total=0, used=0, free=0 | |
2018-06-19T10:51:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/config total=0, used=0, free=0 | |
2018-06-19T10:51:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: / total=18746441728, used=6683959296, free=12062482432 | |
2018-06-19T10:51:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/sys/fs/binfmt_misc total=0, used=0, free=0 | |
2018-06-19T10:51:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/mqueue total=0, used=0, free=0 | |
2018-06-19T10:51:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/hugepages total=0, used=0, free=0 | |
2018-06-19T10:51:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/debug total=0, used=0, free=0 | |
2018-06-19T10:51:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/fs/nfsd total=0, used=0, free=0 | |
2018-06-19T10:51:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /boot total=520794112, used=281665536, free=239128576 | |
2018-06-19T10:51:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /var/lib/nfs/rpc_pipefs total=0, used=0, free=0 | |
2018-06-19T10:51:18.246-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"filesystem": { | |
"total": 18746441728, | |
"free": 12062482432, | |
"type": "xfs", | |
"available": 12062482432, | |
"files": 18317312, | |
"device_name": "/dev/mapper/rhel-root", | |
"mount_point": "/", | |
"free_files": 18077679, | |
"used": { | |
"bytes": 6683959296, | |
"pct": 0.3565 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 1135 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/sys/fs/binfmt_misc total=0, used=0, free=0 | |
2018-06-19T10:51:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run/user/42 total=820273152, used=12288, free=820260864 | |
2018-06-19T10:51:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run/user/0 total=820273152, used=0, free=820273152 | |
2018-06-19T10:51:18.247-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"filesystem": { | |
"mount_point": "/boot", | |
"total": 520794112, | |
"available": 239128576, | |
"free_files": 511656, | |
"used": { | |
"pct": 0.5408, | |
"bytes": 281665536 | |
}, | |
"type": "xfs", | |
"device_name": "/dev/sda1", | |
"files": 512000, | |
"free": 239128576 | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 1457, | |
"name": "filesystem" | |
} | |
} | |
2018-06-19T10:51:18.247-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 1460 | |
}, | |
"system": { | |
"filesystem": { | |
"files": 0, | |
"used": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"total": 0, | |
"mount_point": "/var/lib/nfs/rpc_pipefs", | |
"free": 0, | |
"available": 0, | |
"type": "rpc_pipefs", | |
"free_files": 0, | |
"device_name": "sunrpc" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:18.247-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"fsstat": { | |
"total_size": { | |
"free": 30254436352, | |
"used": 7042154496, | |
"total": 37296590848 | |
}, | |
"count": 31, | |
"total_files": 24833104 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 1506, | |
"name": "fsstat" | |
} | |
} | |
2018-06-19T10:51:18.247-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 1756 | |
}, | |
"system": { | |
"filesystem": { | |
"total": 820273152, | |
"device_name": "tmpfs", | |
"mount_point": "/run/user/42", | |
"free": 820260864, | |
"available": 820260864, | |
"type": "tmpfs", | |
"used": { | |
"pct": 0, | |
"bytes": 12288 | |
}, | |
"free_files": 1001300, | |
"files": 1001309 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:18.247-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 1764 | |
}, | |
"system": { | |
"filesystem": { | |
"device_name": "tmpfs", | |
"free": 820273152, | |
"mount_point": "/run/user/0", | |
"files": 1001309, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"type": "tmpfs", | |
"total": 820273152, | |
"available": 820273152, | |
"free_files": 1001308 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:18.322-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:18.279Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"zombie": 0, | |
"unknown": 0, | |
"total": 191, | |
"sleeping": 191, | |
"running": 0, | |
"idle": 0, | |
"stopped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 42593, | |
"namespace": "system.process.summary" | |
} | |
} | |
2018-06-19T10:51:18.451-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T10:51:18.452-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 93255 | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"name": "metricbeat", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 27887, | |
"memory": { | |
"rss": { | |
"bytes": 28405760, | |
"pct": 0.0035 | |
}, | |
"share": 13770752, | |
"size": 709009408 | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"cpu": { | |
"total": { | |
"value": 3320, | |
"pct": 0.017, | |
"norm": { | |
"pct": 0.0043 | |
} | |
}, | |
"start_time": "2018-06-19T17:48:18.000Z" | |
}, | |
"pid": 28171, | |
"cwd": "/etc/metricbeat", | |
"pgid": 28171, | |
"username": "root" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:18.453-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 93283, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"rss": { | |
"pct": 0.0037, | |
"bytes": 30429184 | |
}, | |
"share": 14041088, | |
"size": 928202752 | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"cwd": "/", | |
"pid": 6389, | |
"ppid": 1, | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"state": "sleeping", | |
"name": "metricbeat", | |
"username": "root", | |
"pgid": 6389, | |
"cpu": { | |
"total": { | |
"value": 7.04814e+06, | |
"pct": 0.016, | |
"norm": { | |
"pct": 0.004 | |
} | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:51:18.453-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 93288, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 11, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"pid": 1168, | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"cwd": "/", | |
"name": "python", | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0008 | |
}, | |
"value": 1.26792e+06, | |
"pct": 0.003 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136 | |
}, | |
"pgid": 1168, | |
"ppid": 1, | |
"username": "root" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:18.453-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 93657 | |
}, | |
"system": { | |
"process": { | |
"pgid": 704, | |
"name": "graylog-collect", | |
"state": "sleeping", | |
"cmdline": "/usr/bin/graylog-collector-sidecar", | |
"cpu": { | |
"total": { | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
}, | |
"value": 277490 | |
}, | |
"start_time": "2018-06-12T23:29:12.000Z" | |
}, | |
"memory": { | |
"size": 373985280, | |
"rss": { | |
"bytes": 10014720, | |
"pct": 0.0012 | |
}, | |
"share": 4067328 | |
}, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 8 | |
}, | |
"username": "root", | |
"cwd": "/", | |
"pid": 704, | |
"ppid": 1 | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:51:18.453-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"cwd": "/", | |
"pid": 1981, | |
"ppid": 1552, | |
"username": "xymon", | |
"memory": { | |
"size": 43212800, | |
"rss": { | |
"pct": 0.0004, | |
"bytes": 3371008 | |
}, | |
"share": 1748992 | |
}, | |
"cmdline": "xymond_client", | |
"fd": { | |
"open": 3, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 1171, | |
"cpu": { | |
"total": { | |
"value": 33990, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
}, | |
"start_time": "2018-06-12T23:30:36.000Z" | |
}, | |
"state": "sleeping", | |
"name": "xymond_client" | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 93802 | |
} | |
} | |
2018-06-19T10:51:18.453-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 93946 | |
}, | |
"system": { | |
"process": { | |
"cwd": "/var/lib/gdm", | |
"pgid": 1674, | |
"state": "sleeping", | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142864384, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"cmdline": "/usr/bin/gnome-shell", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 36 | |
}, | |
"pid": 1714, | |
"ppid": 1674, | |
"name": "gnome-shell", | |
"username": "gdm", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 201510, | |
"pct": 0 | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:18.454-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 94102 | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"start_time": "2018-06-12T23:29:04.000Z", | |
"total": { | |
"value": 45730, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
} | |
}, | |
"ppid": 1, | |
"pgid": 509, | |
"name": "systemd-journal", | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"pid": 509, | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 23949312, | |
"pct": 0.0029 | |
}, | |
"share": 23552000 | |
}, | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"state": "sleeping", | |
"username": "root", | |
"cwd": "/" | |
} | |
} | |
} | |
2018-06-19T10:51:19.243-0700 DEBUG [logstash] logstash/async.go:142 23 events out of 23 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:51:28.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:28.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 263 | |
}, | |
"system": { | |
"cpu": { | |
"softirq": { | |
"pct": 0 | |
}, | |
"system": { | |
"pct": 0.022 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"cores": 4, | |
"idle": { | |
"pct": 3.9549 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.023 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.0451 | |
} | |
} | |
} | |
} | |
2018-06-19T10:51:28.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:28.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 368, | |
"name": "memory", | |
"module": "system" | |
}, | |
"system": { | |
"memory": { | |
"free": 6400913408, | |
"actual": { | |
"free": 7291576320, | |
"used": { | |
"bytes": 911151104, | |
"pct": 0.1111 | |
} | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1801814016, | |
"pct": 0.2197 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:28.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 137, | |
"name": "load" | |
}, | |
"system": { | |
"load": { | |
"5": 0.01, | |
"15": 0.05, | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
}, | |
"cores": 4, | |
"1": 0 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:28.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 229 | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"bytes": 1540094310, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13608014 | |
}, | |
"name": "ens192", | |
"in": { | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8800700556, | |
"packets": 33949959 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:28.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 261 | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"bytes": 6593875462, | |
"packets": 1707373, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"bytes": 6593875462, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1707373 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:51:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:28.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 272, | |
"name": "network", | |
"module": "system" | |
} | |
} | |
2018-06-19T10:51:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:28.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 611 | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
}, | |
"name": "virbr0" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:28.314-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:28.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 33892, | |
"namespace": "system.process.summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 189, | |
"sleeping": 189 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:28.462-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 8 processes | |
2018-06-19T10:51:28.464-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"pgid": 28171, | |
"state": "sleeping", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"username": "root", | |
"name": "metricbeat", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 27887, | |
"memory": { | |
"share": 13770752, | |
"size": 709009408, | |
"rss": { | |
"bytes": 28409856, | |
"pct": 0.0035 | |
} | |
}, | |
"cwd": "/etc/metricbeat", | |
"cpu": { | |
"total": { | |
"pct": 0.018, | |
"norm": { | |
"pct": 0.0045 | |
}, | |
"value": 3500 | |
}, | |
"start_time": "2018-06-19T17:48:18.000Z" | |
}, | |
"pid": 28171 | |
} | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 104429, | |
"name": "process" | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:51:28.464-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 104466 | |
}, | |
"system": { | |
"process": { | |
"cwd": "/", | |
"ppid": 1, | |
"pgid": 6389, | |
"name": "metricbeat", | |
"memory": { | |
"size": 928202752, | |
"rss": { | |
"bytes": 30429184, | |
"pct": 0.0037 | |
}, | |
"share": 14041088 | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"state": "sleeping", | |
"username": "root", | |
"cpu": { | |
"total": { | |
"value": 7.04831e+06, | |
"pct": 0.017, | |
"norm": { | |
"pct": 0.0042 | |
} | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
}, | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 6389 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:28.464-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 104472 | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"total": { | |
"pct": 0.003, | |
"norm": { | |
"pct": 0.0007 | |
}, | |
"value": 690970 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"pid": 1319, | |
"pgid": 1171, | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"username": "xymon", | |
"cwd": "/", | |
"state": "running", | |
"name": "xymond", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 4 | |
}, | |
"ppid": 1171, | |
"memory": { | |
"share": 2699264, | |
"size": 51286016, | |
"rss": { | |
"bytes": 8130560, | |
"pct": 0.001 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:51:28.464-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 104860 | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"share": 2605056, | |
"size": 195588096, | |
"rss": { | |
"bytes": 4194304, | |
"pct": 0.0005 | |
} | |
}, | |
"cmdline": "/usr/lib/systemd/systemd --switched-root --system --deserialize 21", | |
"fd": { | |
"open": 49, | |
"limit": { | |
"soft": 65536, | |
"hard": 65536 | |
} | |
}, | |
"pgid": 1, | |
"state": "sleeping", | |
"username": "root", | |
"pid": 1, | |
"name": "systemd", | |
"cwd": "/", | |
"ppid": 0, | |
"cpu": { | |
"start_time": "2018-06-12T23:28:51.000Z", | |
"total": { | |
"value": 187880, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
} | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:28.465-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 105055, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"pid": 1920, | |
"ppid": 2, | |
"fd": { | |
"open": 0, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"username": "root", | |
"memory": { | |
"size": 0, | |
"rss": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"share": 0 | |
}, | |
"cpu": { | |
"start_time": "2018-06-19T13:40:01.000Z", | |
"total": { | |
"norm": { | |
"pct": 0.0002 | |
}, | |
"value": 490, | |
"pct": 0.001 | |
} | |
}, | |
"pgid": 0, | |
"name": "kworker/3:0", | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:28.465-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 105067 | |
}, | |
"system": { | |
"process": { | |
"cmdline": "/usr/bin/gnome-shell", | |
"cwd": "/var/lib/gdm", | |
"ppid": 1674, | |
"name": "gnome-shell", | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 201510 | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"memory": { | |
"rss": { | |
"bytes": 142864384, | |
"pct": 0.0174 | |
}, | |
"share": 48148480, | |
"size": 2004910080 | |
}, | |
"username": "gdm", | |
"state": "sleeping", | |
"pid": 1714, | |
"pgid": 1674 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:28.465-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 105415, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"value": 1.26793e+06, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0002 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"pid": 1168, | |
"name": "python", | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"pct": 0.0062, | |
"bytes": 51044352 | |
}, | |
"share": 11227136 | |
}, | |
"pgid": 1168, | |
"state": "sleeping", | |
"username": "root", | |
"ppid": 1, | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:28.465-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"start_time": "2018-06-12T23:29:04.000Z", | |
"total": { | |
"value": 45730, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
} | |
}, | |
"username": "root", | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"ppid": 1, | |
"pgid": 509, | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 23949312, | |
"pct": 0.0029 | |
}, | |
"share": 23552000 | |
}, | |
"pid": 509, | |
"fd": { | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
}, | |
"open": 52 | |
}, | |
"cwd": "/", | |
"name": "systemd-journal", | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 105528 | |
} | |
} | |
2018-06-19T10:51:29.243-0700 DEBUG [logstash] logstash/async.go:142 16 events out of 16 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:51:38.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:38.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 233, | |
"name": "cpu" | |
}, | |
"system": { | |
"cpu": { | |
"idle": { | |
"pct": 3.9589 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.025 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.0411 | |
}, | |
"cores": 4, | |
"system": { | |
"pct": 0.016 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:51:38.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:38.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"memory": { | |
"total": 8202727424, | |
"used": { | |
"bytes": 1801924608, | |
"pct": 0.2197 | |
}, | |
"free": 6400802816, | |
"actual": { | |
"free": 7291465728, | |
"used": { | |
"pct": 0.1111, | |
"bytes": 911261696 | |
} | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 339, | |
"name": "memory" | |
} | |
} | |
2018-06-19T10:51:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:38.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"load": { | |
"15": 0.05, | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
}, | |
"cores": 4, | |
"1": 0, | |
"5": 0.01 | |
} | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 93 | |
} | |
} | |
2018-06-19T10:51:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:38.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 170 | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"bytes": 8800717259, | |
"packets": 33950163, | |
"errors": 0, | |
"dropped": 1698 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 13608046, | |
"bytes": 1540119819, | |
"errors": 0 | |
}, | |
"name": "ens192" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:38.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 229 | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6593875462, | |
"packets": 1707373 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1707373, | |
"bytes": 6593875462 | |
} | |
} | |
} | |
} | |
2018-06-19T10:51:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:38.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 241 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0 | |
}, | |
"out": { | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:51:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:38.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
}, | |
"name": "virbr0" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 436 | |
} | |
} | |
2018-06-19T10:51:38.315-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:38.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 35169, | |
"namespace": "system.process.summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 189, | |
"sleeping": 188, | |
"running": 1, | |
"idle": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:38.449-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T10:51:38.450-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 90804 | |
}, | |
"system": { | |
"process": { | |
"pid": 6389, | |
"ppid": 1, | |
"name": "metricbeat", | |
"username": "root", | |
"cwd": "/", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"cpu": { | |
"total": { | |
"value": 7.0485e+06, | |
"pct": 0.019, | |
"norm": { | |
"pct": 0.0048 | |
} | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
}, | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 6389, | |
"memory": { | |
"size": 928202752, | |
"rss": { | |
"bytes": 30429184, | |
"pct": 0.0037 | |
}, | |
"share": 14041088 | |
}, | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:38.450-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 90833, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"cwd": "/etc/metricbeat", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"pgid": 28171, | |
"username": "root", | |
"memory": { | |
"rss": { | |
"bytes": 28426240, | |
"pct": 0.0035 | |
}, | |
"share": 13770752, | |
"size": 709009408 | |
}, | |
"ppid": 27887, | |
"pid": 28171, | |
"name": "metricbeat", | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"value": 3660, | |
"pct": 0.016, | |
"norm": { | |
"pct": 0.004 | |
} | |
}, | |
"start_time": "2018-06-19T17:48:18.000Z" | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:38.450-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 90840, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"name": "irqbalance", | |
"cmdline": "/usr/sbin/irqbalance --foreground", | |
"ppid": 1, | |
"memory": { | |
"size": 22142976, | |
"rss": { | |
"bytes": 1339392, | |
"pct": 0.0002 | |
}, | |
"share": 995328 | |
}, | |
"pid": 744, | |
"fd": { | |
"open": 3, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"value": 25800, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:16.000Z" | |
}, | |
"pgid": 744, | |
"state": "sleeping", | |
"username": "root" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:38.451-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 91288, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"total": { | |
"value": 1.26795e+06, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"pid": 1168, | |
"pgid": 1168, | |
"memory": { | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136, | |
"size": 1634631680 | |
}, | |
"cwd": "/", | |
"state": "sleeping", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"ppid": 1, | |
"name": "python", | |
"username": "root", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 11 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:38.451-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"name": "vmtoolsd", | |
"state": "sleeping", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 8 | |
}, | |
"pid": 747, | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
}, | |
"value": 610700 | |
}, | |
"start_time": "2018-06-12T23:29:16.000Z" | |
}, | |
"ppid": 1, | |
"pgid": 747, | |
"memory": { | |
"rss": { | |
"bytes": 6344704, | |
"pct": 0.0008 | |
}, | |
"share": 4878336, | |
"size": 312348672 | |
}, | |
"cmdline": "/usr/bin/vmtoolsd", | |
"username": "root" | |
} | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 91301, | |
"name": "process" | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:51:38.451-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"cwd": "/var/lib/gdm", | |
"cpu": { | |
"start_time": "2018-06-12T23:29:50.000Z", | |
"total": { | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 201510, | |
"pct": 0 | |
} | |
}, | |
"state": "sleeping", | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"pct": 0.0174, | |
"bytes": 142864384 | |
}, | |
"share": 48148480 | |
}, | |
"cmdline": "/usr/bin/gnome-shell", | |
"pgid": 1674, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 36 | |
}, | |
"pid": 1714, | |
"name": "gnome-shell", | |
"username": "gdm", | |
"ppid": 1674 | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
}, | |
"metricset": { | |
"rtt": 91560, | |
"name": "process", | |
"module": "system" | |
} | |
} | |
2018-06-19T10:51:38.451-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"cwd": "/", | |
"name": "systemd-journal", | |
"state": "sleeping", | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"pct": 0.0029, | |
"bytes": 23949312 | |
}, | |
"share": 23552000 | |
}, | |
"fd": { | |
"open": 52, | |
"limit": { | |
"hard": 16384, | |
"soft": 16384 | |
} | |
}, | |
"username": "root", | |
"pgid": 509, | |
"pid": 509, | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"cpu": { | |
"total": { | |
"value": 45740, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"ppid": 1 | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 91717 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:39.243-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:51:48.236-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":1630,"time":1631},"total":{"ticks":3680,"time":3682,"value":3680},"user":{"ticks":2050,"time":2051}},"info":{"ephemeral_id":"b8779173-060a-43f9-be93-1ad877af938a","uptime":{"ms":210057}},"memstats":{"gc_next":7304400,"memory_alloc":3668360,"memory_total":319488560,"rss":20480}},"libbeat":{"config":{"module":{"running":3}},"output":{"events":{"acked":54,"batches":3,"total":54},"read":{"bytes":18},"write":{"bytes":7222}},"pipeline":{"clients":6,"events":{"active":0,"filtered":26,"published":54,"total":80},"queue":{"acked":54}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"filesystem":{"events":33,"success":33},"fsstat":{"events":1,"success":1},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":22,"success":22},"process_summary":{"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-19T10:51:48.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:48.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 170 | |
}, | |
"system": { | |
"cpu": { | |
"user": { | |
"pct": 0.019 | |
}, | |
"idle": { | |
"pct": 3.963 | |
}, | |
"total": { | |
"pct": 0.037 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0.001 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"cores": 4, | |
"system": { | |
"pct": 0.017 | |
} | |
} | |
} | |
} | |
2018-06-19T10:51:48.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:48.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 422 | |
}, | |
"system": { | |
"memory": { | |
"used": { | |
"pct": 0.2197, | |
"bytes": 1801940992 | |
}, | |
"free": 6400786432, | |
"actual": { | |
"free": 7291449344, | |
"used": { | |
"pct": 0.1111, | |
"bytes": 911278080 | |
} | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
}, | |
"total": 8202727424 | |
} | |
} | |
} | |
2018-06-19T10:51:48.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:48.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"load": { | |
"15": 0.05, | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
}, | |
"cores": 4, | |
"1": 0, | |
"5": 0.01 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 91, | |
"name": "load", | |
"module": "system" | |
} | |
} | |
2018-06-19T10:51:48.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:48.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 216, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"bytes": 8800739782, | |
"packets": 33950420, | |
"errors": 0, | |
"dropped": 1698 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 13608083, | |
"bytes": 1540144349, | |
"errors": 0 | |
}, | |
"name": "ens192" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:48.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:48.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 224, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"dropped": 0, | |
"bytes": 6593875462, | |
"packets": 1707373, | |
"errors": 0 | |
}, | |
"out": { | |
"packets": 1707373, | |
"bytes": 6593875462, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:48.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:48.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 433 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:51:48.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:48.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 606 | |
} | |
} | |
2018-06-19T10:51:48.320-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:48.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 39722, | |
"namespace": "system.process.summary", | |
"name": "process_summary", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 189, | |
"sleeping": 189 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:51:48.456-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T10:51:48.457-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"rss": { | |
"bytes": 28446720, | |
"pct": 0.0035 | |
}, | |
"share": 13770752, | |
"size": 709009408 | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 28171, | |
"state": "sleeping", | |
"cwd": "/etc/metricbeat", | |
"pid": 28171, | |
"ppid": 27887, | |
"cpu": { | |
"start_time": "2018-06-19T17:48:18.000Z", | |
"total": { | |
"value": 3840, | |
"pct": 0.018, | |
"norm": { | |
"pct": 0.0045 | |
} | |
} | |
}, | |
"name": "metricbeat", | |
"username": "root" | |
} | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 98086, | |
"name": "process" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:48.458-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 98120, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0037 | |
}, | |
"value": 7.04865e+06, | |
"pct": 0.015 | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
}, | |
"name": "metricbeat", | |
"memory": { | |
"size": 928202752, | |
"rss": { | |
"pct": 0.0037, | |
"bytes": 30429184 | |
}, | |
"share": 14041088 | |
}, | |
"ppid": 1, | |
"pgid": 6389, | |
"state": "sleeping", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"cwd": "/", | |
"pid": 6389, | |
"username": "root" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:48.458-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 98131 | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 11 | |
}, | |
"pgid": 1168, | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"pid": 1168, | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"pct": 0.003, | |
"norm": { | |
"pct": 0.0007 | |
}, | |
"value": 1.26798e+06 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"cwd": "/", | |
"ppid": 1, | |
"username": "root", | |
"name": "python", | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:51:48.458-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 98529 | |
}, | |
"system": { | |
"process": { | |
"cwd": "/", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 8 | |
}, | |
"username": "root", | |
"memory": { | |
"size": 373985280, | |
"rss": { | |
"bytes": 10014720, | |
"pct": 0.0012 | |
}, | |
"share": 4067328 | |
}, | |
"cpu": { | |
"total": { | |
"value": 277510, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:12.000Z" | |
}, | |
"state": "sleeping", | |
"name": "graylog-collect", | |
"pgid": 704, | |
"pid": 704, | |
"cmdline": "/usr/bin/graylog-collector-sidecar", | |
"ppid": 1 | |
} | |
} | |
} | |
2018-06-19T10:51:48.458-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 98673, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"rss": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"share": 0, | |
"size": 0 | |
}, | |
"pgid": 0, | |
"ppid": 2, | |
"name": "xfsaild/dm-0", | |
"fd": { | |
"open": 0, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"cwd": "/", | |
"pid": 428, | |
"state": "sleeping", | |
"username": "root", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0002 | |
}, | |
"value": 221820, | |
"pct": 0.001 | |
}, | |
"start_time": "2018-06-12T23:28:53.000Z" | |
} | |
} | |
} | |
} | |
2018-06-19T10:51:48.458-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 98706 | |
}, | |
"system": { | |
"process": { | |
"name": "gnome-shell", | |
"cmdline": "/usr/bin/gnome-shell", | |
"cwd": "/var/lib/gdm", | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 201510 | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142864384, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"fd": { | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
}, | |
"open": 36 | |
}, | |
"pgid": 1674, | |
"username": "gdm", | |
"pid": 1714, | |
"ppid": 1674, | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:48.458-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 45740 | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"name": "systemd-journal", | |
"pgid": 509, | |
"username": "root", | |
"pid": 509, | |
"ppid": 1, | |
"state": "sleeping", | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 23949312, | |
"pct": 0.0029 | |
}, | |
"share": 23552000 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 98938 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:49.243-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:51:58.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:58.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 256, | |
"name": "cpu", | |
"module": "system" | |
}, | |
"system": { | |
"cpu": { | |
"steal": { | |
"pct": 0 | |
}, | |
"cores": 4, | |
"system": { | |
"pct": 0.021 | |
}, | |
"user": { | |
"pct": 0.021 | |
}, | |
"idle": { | |
"pct": 3.9579 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.0421 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:58.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:58.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"memory": { | |
"actual": { | |
"free": 7291195392, | |
"used": { | |
"pct": 0.1111, | |
"bytes": 911532032 | |
} | |
}, | |
"swap": { | |
"free": 2147479552, | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
} | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1802194944, | |
"pct": 0.2197 | |
}, | |
"free": 6400532480 | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 361, | |
"name": "memory" | |
} | |
} | |
2018-06-19T10:51:58.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:58.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 118, | |
"name": "load" | |
}, | |
"system": { | |
"load": { | |
"5": 0.01, | |
"15": 0.05, | |
"norm": { | |
"5": 0.0025, | |
"15": 0.0125, | |
"1": 0 | |
}, | |
"cores": 4, | |
"1": 0 | |
} | |
} | |
} | |
2018-06-19T10:51:58.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:58.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 170, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"packets": 33950800, | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8800994337 | |
}, | |
"out": { | |
"packets": 13608224, | |
"bytes": 1540174671, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:58.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:58.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"packets": 1707402, | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6594063219 | |
}, | |
"out": { | |
"bytes": 6594063219, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1707402 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 190 | |
} | |
} | |
2018-06-19T10:51:58.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:58.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 196, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:58.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:58.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 499 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:51:58.315-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:58.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 35109, | |
"namespace": "system.process.summary", | |
"name": "process_summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 189, | |
"sleeping": 189, | |
"running": 0 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:51:58.471-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 6 processes | |
2018-06-19T10:51:58.472-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 112971, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"pid": 6389, | |
"cpu": { | |
"start_time": "2018-06-14T16:41:30.000Z", | |
"total": { | |
"value": 7.04883e+06, | |
"pct": 0.018, | |
"norm": { | |
"pct": 0.0045 | |
} | |
} | |
}, | |
"ppid": 1, | |
"memory": { | |
"size": 928202752, | |
"rss": { | |
"bytes": 30429184, | |
"pct": 0.0037 | |
}, | |
"share": 14041088 | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"cwd": "/", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 6 | |
}, | |
"pgid": 6389, | |
"name": "metricbeat", | |
"state": "sleeping", | |
"username": "root" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:58.472-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 113006 | |
}, | |
"system": { | |
"process": { | |
"name": "metricbeat", | |
"username": "root", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"state": "sleeping", | |
"cwd": "/etc/metricbeat", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0042 | |
}, | |
"value": 4010, | |
"pct": 0.017 | |
}, | |
"start_time": "2018-06-19T17:48:18.000Z" | |
}, | |
"ppid": 27887, | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 28171, | |
"pgid": 28171, | |
"memory": { | |
"rss": { | |
"bytes": 28459008, | |
"pct": 0.0035 | |
}, | |
"share": 13774848, | |
"size": 709009408 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:58.473-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 113015, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"start_time": "2018-06-12T23:29:34.000Z", | |
"total": { | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
}, | |
"value": 1.268e+06 | |
} | |
}, | |
"pgid": 1168, | |
"username": "root", | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"pct": 0.0062, | |
"bytes": 51044352 | |
}, | |
"share": 11227136 | |
}, | |
"ppid": 1, | |
"state": "sleeping", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"cwd": "/", | |
"name": "python", | |
"pid": 1168, | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:51:58.473-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 113384 | |
}, | |
"system": { | |
"process": { | |
"pid": 509, | |
"name": "systemd-journal", | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"pct": 0.0029, | |
"bytes": 23949312 | |
}, | |
"share": 23552000 | |
}, | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"value": 45750, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"ppid": 1, | |
"state": "sleeping", | |
"pgid": 509, | |
"username": "root", | |
"cmdline": "/usr/lib/systemd/systemd-journald" | |
} | |
} | |
} | |
2018-06-19T10:51:58.473-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 113541 | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"username": "root", | |
"pgid": 0, | |
"name": "kworker/0:0", | |
"fd": { | |
"open": 0, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"cpu": { | |
"total": { | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0002 | |
}, | |
"value": 2010 | |
}, | |
"start_time": "2018-06-19T13:54:28.000Z" | |
}, | |
"pid": 3396, | |
"ppid": 2, | |
"memory": { | |
"size": 0, | |
"rss": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"share": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:51:58.473-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:51:58.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 113550 | |
}, | |
"system": { | |
"process": { | |
"cmdline": "/usr/bin/gnome-shell", | |
"pid": 1714, | |
"ppid": 1674, | |
"cpu": { | |
"total": { | |
"value": 201510, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"username": "gdm", | |
"cwd": "/var/lib/gdm", | |
"name": "gnome-shell", | |
"state": "sleeping", | |
"memory": { | |
"rss": { | |
"pct": 0.0174, | |
"bytes": 142864384 | |
}, | |
"share": 48148480, | |
"size": 2004910080 | |
}, | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 1674 | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:51:59.243-0700 DEBUG [logstash] logstash/async.go:142 14 events out of 14 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:52:08.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:08.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 230 | |
}, | |
"system": { | |
"cpu": { | |
"softirq": { | |
"pct": 0 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"cores": 4, | |
"idle": { | |
"pct": 3.9569 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.024 | |
}, | |
"system": { | |
"pct": 0.019 | |
}, | |
"total": { | |
"pct": 0.0431 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"irq": { | |
"pct": 0 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:52:08.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:08.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 253 | |
}, | |
"system": { | |
"memory": { | |
"used": { | |
"bytes": 1802260480, | |
"pct": 0.2197 | |
}, | |
"free": 6400466944, | |
"actual": { | |
"free": 7291129856, | |
"used": { | |
"bytes": 911597568, | |
"pct": 0.1111 | |
} | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
}, | |
"total": 8202727424 | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:52:08.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:08.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"load": { | |
"1": 0, | |
"5": 0.01, | |
"15": 0.05, | |
"norm": { | |
"15": 0.0125, | |
"1": 0, | |
"5": 0.0025 | |
}, | |
"cores": 4 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 115, | |
"name": "load" | |
} | |
} | |
2018-06-19T10:52:08.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:08.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 186, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13608258, | |
"bytes": 1540196328 | |
}, | |
"name": "ens192", | |
"in": { | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8801019431, | |
"packets": 33951092 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:08.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:08.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 212, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6594063219, | |
"packets": 1707402 | |
}, | |
"out": { | |
"bytes": 6594063219, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1707402 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:52:08.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:08.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 218 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0 | |
} | |
} | |
} | |
} | |
2018-06-19T10:52:08.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:08.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 464 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:08.311-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:08.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 31172, | |
"namespace": "system.process.summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"running": 1, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 189, | |
"sleeping": 188 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:08.453-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T10:52:08.454-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 94883, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"pgid": 6389, | |
"username": "root", | |
"cwd": "/", | |
"ppid": 1, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 6 | |
}, | |
"pid": 6389, | |
"name": "metricbeat", | |
"memory": { | |
"size": 928202752, | |
"rss": { | |
"pct": 0.0037, | |
"bytes": 30429184 | |
}, | |
"share": 14041088 | |
}, | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0043 | |
}, | |
"value": 7.049e+06, | |
"pct": 0.017 | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
} | |
} | |
} | |
} | |
2018-06-19T10:52:08.454-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 94920, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"pid": 28171, | |
"pgid": 28171, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 27887, | |
"name": "metricbeat", | |
"memory": { | |
"size": 709009408, | |
"rss": { | |
"bytes": 28463104, | |
"pct": 0.0035 | |
}, | |
"share": 13774848 | |
}, | |
"cpu": { | |
"start_time": "2018-06-19T17:48:18.000Z", | |
"total": { | |
"value": 4170, | |
"pct": 0.016, | |
"norm": { | |
"pct": 0.004 | |
} | |
} | |
}, | |
"state": "sleeping", | |
"cwd": "/etc/metricbeat", | |
"username": "root" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:08.455-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 94926 | |
}, | |
"system": { | |
"process": { | |
"name": "python", | |
"cpu": { | |
"total": { | |
"pct": 0.003, | |
"norm": { | |
"pct": 0.0008 | |
}, | |
"value": 1.26803e+06 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"pgid": 1168, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 11 | |
}, | |
"state": "sleeping", | |
"username": "root", | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136 | |
}, | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"pid": 1168, | |
"ppid": 1, | |
"cwd": "/" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:52:08.455-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 95443 | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"cmdline": "/usr/bin/vmtoolsd", | |
"pid": 747, | |
"ppid": 1, | |
"pgid": 747, | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0005 | |
}, | |
"value": 610740, | |
"pct": 0.002 | |
}, | |
"start_time": "2018-06-12T23:29:16.000Z" | |
}, | |
"fd": { | |
"open": 8, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"name": "vmtoolsd", | |
"username": "root", | |
"memory": { | |
"share": 4878336, | |
"size": 312348672, | |
"rss": { | |
"bytes": 6344704, | |
"pct": 0.0008 | |
} | |
}, | |
"cwd": "/" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:52:08.455-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 95460 | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 0, | |
"rss": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"share": 0 | |
}, | |
"ppid": 2, | |
"name": "kworker/2:2", | |
"cwd": "/", | |
"cpu": { | |
"start_time": "2018-06-19T17:43:58.000Z", | |
"total": { | |
"value": 20, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
} | |
}, | |
"username": "root", | |
"fd": { | |
"open": 0, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 27614, | |
"pgid": 0, | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:08.455-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 95737 | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"total": { | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
}, | |
"value": 201520 | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"username": "gdm", | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142864384, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"cwd": "/var/lib/gdm", | |
"name": "gnome-shell", | |
"state": "sleeping", | |
"cmdline": "/usr/bin/gnome-shell", | |
"pid": 1714, | |
"pgid": 1674, | |
"ppid": 1674 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:08.455-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:08.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 95902 | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 23949312, | |
"pct": 0.0029 | |
}, | |
"share": 23552000 | |
}, | |
"cpu": { | |
"total": { | |
"value": 45750, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"pgid": 509, | |
"ppid": 1, | |
"username": "root", | |
"fd": { | |
"open": 52, | |
"limit": { | |
"hard": 16384, | |
"soft": 16384 | |
} | |
}, | |
"name": "systemd-journal", | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"cwd": "/", | |
"pid": 509 | |
} | |
} | |
} | |
2018-06-19T10:52:09.243-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:52:18.236-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":1880,"time":1880},"total":{"ticks":4190,"time":4197,"value":4190},"user":{"ticks":2310,"time":2317}},"info":{"ephemeral_id":"b8779173-060a-43f9-be93-1ad877af938a","uptime":{"ms":240057}},"memstats":{"gc_next":7308592,"memory_alloc":3684504,"memory_total":363782696,"rss":36864}},"libbeat":{"config":{"module":{"running":3}},"output":{"events":{"acked":44,"batches":3,"total":44},"read":{"bytes":18},"write":{"bytes":5976}},"pipeline":{"clients":6,"events":{"active":0,"published":44,"total":44},"queue":{"acked":44}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":20,"success":20},"process_summary":{"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-19T10:52:18.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:18.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 231, | |
"name": "cpu", | |
"module": "system" | |
}, | |
"system": { | |
"cpu": { | |
"total": { | |
"pct": 0.0531 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"system": { | |
"pct": 0.026 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.026 | |
}, | |
"idle": { | |
"pct": 3.9469 | |
}, | |
"cores": 4, | |
"iowait": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0.001 | |
}, | |
"steal": { | |
"pct": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:18.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:18.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 374 | |
}, | |
"system": { | |
"memory": { | |
"total": 8202727424, | |
"used": { | |
"bytes": 1803956224, | |
"pct": 0.2199 | |
}, | |
"free": 6398771200, | |
"actual": { | |
"used": { | |
"pct": 0.1113, | |
"bytes": 913293312 | |
}, | |
"free": 7289434112 | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:52:18.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:18.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 94, | |
"name": "load", | |
"module": "system" | |
}, | |
"system": { | |
"load": { | |
"cores": 4, | |
"1": 0, | |
"5": 0.01, | |
"15": 0.05, | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:18.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 159 | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"dropped": 1698, | |
"bytes": 8801163665, | |
"packets": 33952111, | |
"errors": 0 | |
}, | |
"out": { | |
"packets": 13609086, | |
"bytes": 1540279618, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:18.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"bytes": 6594132724, | |
"packets": 1707442, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 1707442, | |
"bytes": 6594132724, | |
"errors": 0 | |
}, | |
"name": "lo" | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 180 | |
} | |
} | |
2018-06-19T10:52:18.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0 | |
}, | |
"name": "virbr0-nic" | |
} | |
}, | |
"metricset": { | |
"rtt": 186, | |
"name": "network", | |
"module": "system" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:18.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:18.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 429, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
}, | |
"name": "virbr0" | |
} | |
} | |
} | |
2018-06-19T10:52:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: / total=18746441728, used=6683959296, free=12062482432 | |
2018-06-19T10:52:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys total=0, used=0, free=0 | |
2018-06-19T10:52:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc total=0, used=0, free=0 | |
2018-06-19T10:52:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev total=4084723712, used=0, free=4084723712 | |
2018-06-19T10:52:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/security total=0, used=0, free=0 | |
2018-06-19T10:52:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/shm total=4101361664, used=81920, free=4101279744 | |
2018-06-19T10:52:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/pts total=0, used=0, free=0 | |
2018-06-19T10:52:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run total=4101361664, used=76435456, free=4024926208 | |
2018-06-19T10:52:18.245-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup total=4101361664, used=0, free=4101361664 | |
2018-06-19T10:52:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/systemd total=0, used=0, free=0 | |
2018-06-19T10:52:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/pstore total=0, used=0, free=0 | |
2018-06-19T10:52:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/perf_event total=0, used=0, free=0 | |
2018-06-19T10:52:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/freezer total=0, used=0, free=0 | |
2018-06-19T10:52:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/memory total=0, used=0, free=0 | |
2018-06-19T10:52:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/pids total=0, used=0, free=0 | |
2018-06-19T10:52:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/cpu,cpuacct total=0, used=0, free=0 | |
2018-06-19T10:52:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/blkio total=0, used=0, free=0 | |
2018-06-19T10:52:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/net_cls,net_prio total=0, used=0, free=0 | |
2018-06-19T10:52:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/devices total=0, used=0, free=0 | |
2018-06-19T10:52:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/hugetlb total=0, used=0, free=0 | |
2018-06-19T10:52:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/cpuset total=0, used=0, free=0 | |
2018-06-19T10:52:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/config total=0, used=0, free=0 | |
2018-06-19T10:52:18.246-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 613 | |
}, | |
"system": { | |
"filesystem": { | |
"total": 18746441728, | |
"files": 18317312, | |
"device_name": "rootfs", | |
"used": { | |
"pct": 0.3565, | |
"bytes": 6683959296 | |
}, | |
"mount_point": "/", | |
"available": 12062482432, | |
"free_files": 18077679, | |
"type": "rootfs", | |
"free": 12062482432 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: / total=18746441728, used=6683959296, free=12062482432 | |
2018-06-19T10:52:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/sys/fs/binfmt_misc total=0, used=0, free=0 | |
2018-06-19T10:52:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/mqueue total=0, used=0, free=0 | |
2018-06-19T10:52:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/hugepages total=0, used=0, free=0 | |
2018-06-19T10:52:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/debug total=0, used=0, free=0 | |
2018-06-19T10:52:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/fs/nfsd total=0, used=0, free=0 | |
2018-06-19T10:52:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /boot total=520794112, used=281665536, free=239128576 | |
2018-06-19T10:52:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /var/lib/nfs/rpc_pipefs total=0, used=0, free=0 | |
2018-06-19T10:52:18.246-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"filesystem": { | |
"available": 4024926208, | |
"device_name": "tmpfs", | |
"free": 4024926208, | |
"free_files": 1000766, | |
"mount_point": "/run", | |
"total": 4101361664, | |
"files": 1001309, | |
"used": { | |
"pct": 0.0186, | |
"bytes": 76435456 | |
}, | |
"type": "tmpfs" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 1006 | |
} | |
} | |
2018-06-19T10:52:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/sys/fs/binfmt_misc total=0, used=0, free=0 | |
2018-06-19T10:52:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run/user/42 total=820273152, used=12288, free=820260864 | |
2018-06-19T10:52:18.246-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run/user/0 total=820273152, used=0, free=820273152 | |
2018-06-19T10:52:18.246-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "fsstat", | |
"module": "system", | |
"rtt": 1235 | |
}, | |
"system": { | |
"fsstat": { | |
"total_files": 24833104, | |
"total_size": { | |
"total": 37296590848, | |
"free": 30254436352, | |
"used": 7042154496 | |
}, | |
"count": 31 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:18.247-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 1610 | |
}, | |
"system": { | |
"filesystem": { | |
"available": 12062482432, | |
"mount_point": "/", | |
"files": 18317312, | |
"free_files": 18077679, | |
"total": 18746441728, | |
"free": 12062482432, | |
"type": "xfs", | |
"used": { | |
"pct": 0.3565, | |
"bytes": 6683959296 | |
}, | |
"device_name": "/dev/mapper/rhel-root" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:18.247-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 1810 | |
}, | |
"system": { | |
"filesystem": { | |
"total": 520794112, | |
"files": 512000, | |
"type": "xfs", | |
"used": { | |
"pct": 0.5408, | |
"bytes": 281665536 | |
}, | |
"mount_point": "/boot", | |
"device_name": "/dev/sda1", | |
"free": 239128576, | |
"available": 239128576, | |
"free_files": 511656 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:18.247-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 1814 | |
}, | |
"system": { | |
"filesystem": { | |
"mount_point": "/var/lib/nfs/rpc_pipefs", | |
"available": 0, | |
"free": 0, | |
"free_files": 0, | |
"used": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"device_name": "sunrpc", | |
"total": 0, | |
"files": 0, | |
"type": "rpc_pipefs" | |
} | |
} | |
} | |
2018-06-19T10:52:18.247-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 2039, | |
"name": "filesystem" | |
}, | |
"system": { | |
"filesystem": { | |
"files": 1001309, | |
"mount_point": "/run/user/42", | |
"total": 820273152, | |
"free": 820260864, | |
"free_files": 1001300, | |
"device_name": "tmpfs", | |
"available": 820260864, | |
"used": { | |
"pct": 0, | |
"bytes": 12288 | |
}, | |
"type": "tmpfs" | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:52:18.247-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:18.245Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 2055, | |
"name": "filesystem" | |
}, | |
"system": { | |
"filesystem": { | |
"free_files": 1001308, | |
"used": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"device_name": "tmpfs", | |
"mount_point": "/run/user/0", | |
"total": 820273152, | |
"type": "tmpfs", | |
"free": 820273152, | |
"files": 1001309, | |
"available": 820273152 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:18.314-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:18.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 191, | |
"sleeping": 191, | |
"running": 0 | |
} | |
} | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 34200, | |
"namespace": "system.process.summary", | |
"name": "process_summary" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:18.455-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T10:52:18.456-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 96798, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"name": "metricbeat", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"cwd": "/", | |
"pid": 6389, | |
"state": "sleeping", | |
"username": "root", | |
"cpu": { | |
"total": { | |
"value": 7.04918e+06, | |
"pct": 0.018, | |
"norm": { | |
"pct": 0.0045 | |
} | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
}, | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 1, | |
"pgid": 6389, | |
"memory": { | |
"size": 928202752, | |
"rss": { | |
"bytes": 30429184, | |
"pct": 0.0037 | |
}, | |
"share": 14041088 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:52:18.456-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"cwd": "/etc/metricbeat", | |
"cpu": { | |
"start_time": "2018-06-19T17:48:18.000Z", | |
"total": { | |
"value": 4340, | |
"pct": 0.017, | |
"norm": { | |
"pct": 0.0043 | |
} | |
} | |
}, | |
"state": "sleeping", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"pid": 28171, | |
"pgid": 28171, | |
"username": "root", | |
"ppid": 27887, | |
"name": "metricbeat", | |
"memory": { | |
"size": 709009408, | |
"rss": { | |
"bytes": 28471296, | |
"pct": 0.0035 | |
}, | |
"share": 13774848 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 96828 | |
} | |
} | |
2018-06-19T10:52:18.456-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 96833 | |
}, | |
"system": { | |
"process": { | |
"cwd": "/", | |
"pid": 1319, | |
"pgid": 1171, | |
"username": "xymon", | |
"name": "xymond", | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"fd": { | |
"open": 4, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"memory": { | |
"size": 51286016, | |
"rss": { | |
"bytes": 8130560, | |
"pct": 0.001 | |
}, | |
"share": 2699264 | |
}, | |
"ppid": 1171, | |
"state": "sleeping", | |
"cpu": { | |
"start_time": "2018-06-12T23:29:34.000Z", | |
"total": { | |
"value": 691020, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
} | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:18.457-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 97175 | |
}, | |
"system": { | |
"process": { | |
"cwd": "/", | |
"username": "root", | |
"ppid": 1, | |
"name": "python", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 1168, | |
"pgid": 1168, | |
"state": "sleeping", | |
"memory": { | |
"share": 11227136, | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
} | |
}, | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0005 | |
}, | |
"value": 1.26805e+06, | |
"pct": 0.002 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:18.457-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 97363 | |
}, | |
"system": { | |
"process": { | |
"pid": 428, | |
"pgid": 0, | |
"memory": { | |
"size": 0, | |
"rss": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"share": 0 | |
}, | |
"username": "root", | |
"name": "xfsaild/dm-0", | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"value": 221830, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
}, | |
"start_time": "2018-06-12T23:28:53.000Z" | |
}, | |
"fd": { | |
"open": 0, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 2 | |
} | |
} | |
} | |
2018-06-19T10:52:18.457-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 97532 | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142864384, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"cwd": "/var/lib/gdm", | |
"ppid": 1674, | |
"name": "gnome-shell", | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 1714, | |
"pgid": 1674, | |
"username": "gdm", | |
"cmdline": "/usr/bin/gnome-shell", | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 201520, | |
"pct": 0 | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:18.457-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:18.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 97667, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"pid": 509, | |
"ppid": 1, | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"pct": 0.0029, | |
"bytes": 23949312 | |
}, | |
"share": 23552000 | |
}, | |
"cwd": "/", | |
"cpu": { | |
"start_time": "2018-06-12T23:29:04.000Z", | |
"total": { | |
"value": 45750, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
} | |
}, | |
"name": "systemd-journal", | |
"username": "root", | |
"pgid": 509 | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:52:19.243-0700 DEBUG [logstash] logstash/async.go:142 23 events out of 23 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:52:28.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:28.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"cpu": { | |
"steal": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.0301 | |
}, | |
"system": { | |
"pct": 0.0401 | |
}, | |
"iowait": { | |
"pct": 0.001 | |
}, | |
"total": { | |
"pct": 0.0712 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0 | |
}, | |
"idle": { | |
"pct": 3.9288 | |
}, | |
"cores": 4, | |
"nice": { | |
"pct": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 252 | |
} | |
} | |
2018-06-19T10:52:28.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:28.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 280, | |
"name": "memory" | |
}, | |
"system": { | |
"memory": { | |
"actual": { | |
"free": 7291355136, | |
"used": { | |
"pct": 0.1111, | |
"bytes": 911372288 | |
} | |
}, | |
"swap": { | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552, | |
"total": 2147479552 | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1802039296, | |
"pct": 0.2197 | |
}, | |
"free": 6400688128 | |
} | |
} | |
} | |
2018-06-19T10:52:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:28.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"load": { | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
}, | |
"cores": 4, | |
"1": 0, | |
"5": 0.01, | |
"15": 0.05 | |
} | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 118 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:28.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 237, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"dropped": 1698, | |
"bytes": 8801441034, | |
"packets": 33952765, | |
"errors": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 13609435, | |
"bytes": 1540343445, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:28.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 266, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"packets": 1707531, | |
"bytes": 6594441193, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"name": "lo", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6594441193, | |
"packets": 1707531 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:28.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0 | |
} | |
} | |
}, | |
"metricset": { | |
"rtt": 276, | |
"name": "network", | |
"module": "system" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:28.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:28.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 597 | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
}, | |
"name": "virbr0", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
} | |
} | |
} | |
} | |
2018-06-19T10:52:28.316-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:28.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 36529, | |
"namespace": "system.process.summary", | |
"name": "process_summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 189, | |
"sleeping": 189, | |
"running": 0, | |
"idle": 0 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:52:28.474-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T10:52:28.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 116906 | |
}, | |
"system": { | |
"process": { | |
"username": "root", | |
"name": "metricbeat", | |
"state": "sleeping", | |
"pid": 28171, | |
"ppid": 27887, | |
"cpu": { | |
"total": { | |
"value": 4530, | |
"pct": 0.019, | |
"norm": { | |
"pct": 0.0047 | |
} | |
}, | |
"start_time": "2018-06-19T17:48:18.000Z" | |
}, | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 28171, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"cwd": "/etc/metricbeat", | |
"memory": { | |
"rss": { | |
"bytes": 28680192, | |
"pct": 0.0035 | |
}, | |
"share": 13885440, | |
"size": 709009408 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:52:28.477-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 116962 | |
}, | |
"system": { | |
"process": { | |
"pgid": 6389, | |
"cwd": "/", | |
"cpu": { | |
"start_time": "2018-06-14T16:41:30.000Z", | |
"total": { | |
"norm": { | |
"pct": 0.0042 | |
}, | |
"value": 7.04935e+06, | |
"pct": 0.017 | |
} | |
}, | |
"pid": 6389, | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"name": "metricbeat", | |
"state": "sleeping", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"ppid": 1, | |
"username": "root", | |
"memory": { | |
"size": 928202752, | |
"rss": { | |
"bytes": 30429184, | |
"pct": 0.0037 | |
}, | |
"share": 14041088 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:28.477-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 116973 | |
}, | |
"system": { | |
"process": { | |
"username": "xymon", | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"pgid": 1171, | |
"state": "sleeping", | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0005 | |
}, | |
"value": 691040, | |
"pct": 0.002 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"pid": 1319, | |
"ppid": 1171, | |
"fd": { | |
"open": 4, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"name": "xymond", | |
"memory": { | |
"size": 51286016, | |
"rss": { | |
"bytes": 8130560, | |
"pct": 0.001 | |
}, | |
"share": 2699264 | |
} | |
} | |
} | |
} | |
2018-06-19T10:52:28.477-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 117538 | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136 | |
}, | |
"cpu": { | |
"total": { | |
"value": 1.26807e+06, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"state": "sleeping", | |
"username": "root", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"name": "python", | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"cwd": "/", | |
"pid": 1168, | |
"ppid": 1, | |
"pgid": 1168 | |
} | |
} | |
} | |
2018-06-19T10:52:28.478-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 117810, | |
"name": "process", | |
"module": "system" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"username": "root", | |
"name": "migration/3", | |
"cpu": { | |
"start_time": "2018-06-12T23:28:51.000Z", | |
"total": { | |
"norm": { | |
"pct": 0.0002 | |
}, | |
"value": 1950, | |
"pct": 0.001 | |
} | |
}, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 0 | |
}, | |
"ppid": 2, | |
"pgid": 0, | |
"memory": { | |
"size": 0, | |
"rss": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"share": 0 | |
}, | |
"pid": 22 | |
} | |
} | |
} | |
2018-06-19T10:52:28.478-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 118026, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"ppid": 1674, | |
"pgid": 1674, | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"cwd": "/var/lib/gdm", | |
"state": "sleeping", | |
"cmdline": "/usr/bin/gnome-shell", | |
"name": "gnome-shell", | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 201520 | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"pid": 1714, | |
"username": "gdm", | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142864384, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
} | |
} | |
} | |
} | |
2018-06-19T10:52:28.478-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:28.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 118200, | |
"name": "process", | |
"module": "system" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"pgid": 509, | |
"username": "root", | |
"cwd": "/", | |
"ppid": 1, | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"pid": 509, | |
"state": "sleeping", | |
"memory": { | |
"rss": { | |
"bytes": 23949312, | |
"pct": 0.0029 | |
}, | |
"share": 23552000, | |
"size": 62988288 | |
}, | |
"name": "systemd-journal", | |
"cpu": { | |
"total": { | |
"value": 45750, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
} | |
} | |
} | |
} | |
2018-06-19T10:52:29.242-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:52:38.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:38.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 210 | |
}, | |
"system": { | |
"cpu": { | |
"cores": 4, | |
"idle": { | |
"pct": 3.9599 | |
}, | |
"total": { | |
"pct": 0.0401 | |
}, | |
"system": { | |
"pct": 0.019 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.021 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:38.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:38.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 339 | |
}, | |
"system": { | |
"memory": { | |
"actual": { | |
"free": 7291228160, | |
"used": { | |
"pct": 0.1111, | |
"bytes": 911499264 | |
} | |
}, | |
"swap": { | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552, | |
"total": 2147479552 | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1802166272, | |
"pct": 0.2197 | |
}, | |
"free": 6400561152 | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:52:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:38.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 86 | |
}, | |
"system": { | |
"load": { | |
"1": 0, | |
"5": 0.01, | |
"15": 0.05, | |
"norm": { | |
"15": 0.0125, | |
"1": 0, | |
"5": 0.0025 | |
}, | |
"cores": 4 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:38.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13609473, | |
"bytes": 1540367771 | |
}, | |
"name": "ens192", | |
"in": { | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8801458862, | |
"packets": 33952994 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 236 | |
} | |
} | |
2018-06-19T10:52:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:38.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 260 | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"dropped": 0, | |
"bytes": 6594441193, | |
"packets": 1707531, | |
"errors": 0 | |
}, | |
"out": { | |
"bytes": 6594441193, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1707531 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:52:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:38.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 271 | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"name": "virbr0-nic", | |
"in": { | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:38.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:38.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 521 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:38.312-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:38.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"namespace": "system.process.summary", | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 31935 | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"total": 189, | |
"sleeping": 189, | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:52:38.452-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T10:52:38.454-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 94721 | |
}, | |
"system": { | |
"process": { | |
"pgid": 6389, | |
"name": "metricbeat", | |
"username": "root", | |
"memory": { | |
"rss": { | |
"bytes": 30429184, | |
"pct": 0.0037 | |
}, | |
"share": 14041088, | |
"size": 928202752 | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"cpu": { | |
"total": { | |
"value": 7.04952e+06, | |
"pct": 0.017, | |
"norm": { | |
"pct": 0.0043 | |
} | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
}, | |
"cwd": "/", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 1, | |
"state": "sleeping", | |
"pid": 6389 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:38.454-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 94756 | |
}, | |
"system": { | |
"process": { | |
"pgid": 28171, | |
"pid": 28171, | |
"username": "root", | |
"memory": { | |
"size": 709009408, | |
"rss": { | |
"pct": 0.0035, | |
"bytes": 28692480 | |
}, | |
"share": 13889536 | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"cwd": "/etc/metricbeat", | |
"state": "sleeping", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 27887, | |
"name": "metricbeat", | |
"cpu": { | |
"total": { | |
"value": 4690, | |
"pct": 0.016, | |
"norm": { | |
"pct": 0.004 | |
} | |
}, | |
"start_time": "2018-06-19T17:48:18.000Z" | |
} | |
} | |
} | |
} | |
2018-06-19T10:52:38.454-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 94762, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"name": "python", | |
"pgid": 1168, | |
"username": "root", | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136 | |
}, | |
"pid": 1168, | |
"cpu": { | |
"total": { | |
"pct": 0.003, | |
"norm": { | |
"pct": 0.0008 | |
}, | |
"value": 1.2681e+06 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"fd": { | |
"open": 11, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"ppid": 1, | |
"state": "sleeping", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"cwd": "/" | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T10:52:38.455-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 95296, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"name": "xfsaild/dm-0", | |
"cpu": { | |
"total": { | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
}, | |
"value": 221840 | |
}, | |
"start_time": "2018-06-12T23:28:53.000Z" | |
}, | |
"username": "root", | |
"fd": { | |
"open": 0, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 0, | |
"ppid": 2, | |
"state": "sleeping", | |
"pid": 428, | |
"memory": { | |
"size": 0, | |
"rss": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"share": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:38.455-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 95310 | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"total": { | |
"value": 691050, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"username": "xymon", | |
"cwd": "/", | |
"ppid": 1171, | |
"state": "sleeping", | |
"fd": { | |
"open": 4, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 1319, | |
"pgid": 1171, | |
"memory": { | |
"size": 51286016, | |
"rss": { | |
"bytes": 8130560, | |
"pct": 0.001 | |
}, | |
"share": 2699264 | |
}, | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"name": "xymond" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:38.455-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 95644, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"ppid": 1674, | |
"cmdline": "/usr/bin/gnome-shell", | |
"pgid": 1674, | |
"state": "sleeping", | |
"cwd": "/var/lib/gdm", | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 1714, | |
"memory": { | |
"share": 48148480, | |
"size": 2004910080, | |
"rss": { | |
"pct": 0.0174, | |
"bytes": 142864384 | |
} | |
}, | |
"cpu": { | |
"total": { | |
"value": 201520, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"name": "gnome-shell", | |
"username": "gdm" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:52:38.455-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:38.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 45750 | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"pid": 509, | |
"ppid": 1, | |
"username": "root", | |
"cwd": "/", | |
"state": "sleeping", | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 23957504, | |
"pct": 0.0029 | |
}, | |
"share": 23560192 | |
}, | |
"name": "systemd-journal", | |
"pgid": 509, | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 95820, | |
"name": "process" | |
} | |
} | |
2018-06-19T10:52:39.243-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T10:52:48.236-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":2120,"time":2125},"total":{"ticks":4700,"time":4714,"value":4700},"user":{"ticks":2580,"time":2589}},"info":{"ephemeral_id":"b8779173-060a-43f9-be93-1ad877af938a","uptime":{"ms":270059}},"memstats":{"gc_next":7304640,"memory_alloc":3680024,"memory_total":408930072,"rss":229376}},"libbeat":{"config":{"module":{"running":3}},"output":{"events":{"acked":53,"batches":3,"total":53},"read":{"bytes":18},"write":{"bytes":7172}},"pipeline":{"clients":6,"events":{"active":0,"filtered":26,"published":53,"total":79},"queue":{"acked":53}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"filesystem":{"events":33,"success":33},"fsstat":{"events":1,"success":1},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":21,"success":21},"process_summary":{"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-19T10:52:48.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:48.239Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"cpu": { | |
"nice": { | |
"pct": 0 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.0401 | |
}, | |
"idle": { | |
"pct": 3.9599 | |
}, | |
"cores": 4, | |
"user": { | |
"pct": 0.02 | |
}, | |
"system": { | |
"pct": 0.019 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0.001 | |
}, | |
"irq": { | |
"pct": 0 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
}, | |
"metricset": { | |
"rtt": 140, | |
"name": "cpu", | |
"module": "system" | |
} | |
} | |
2018-06-19T10:52:48.240-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:48.240Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 228, | |
"name": "memory", | |
"module": "system" | |
}, | |
"system": { | |
"memory": { | |
"total": 8202727424, | |
"used": { | |
"pct": 0.2197, | |
"bytes": 1802166272 | |
}, | |
"free": 6400561152, | |
"actual": { | |
"used": { | |
"pct": 0.1111, | |
"bytes": 911499264 | |
}, | |
"free": 7291228160 | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
} | |
} | |
} | |
} | |
2018-06-19T10:52:48.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:48.241Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 78 | |
}, | |
"system": { | |
"load": { | |
"15": 0.05, | |
"norm": { | |
"15": 0.0125, | |
"1": 0, | |
"5": 0.0025 | |
}, | |
"cores": 4, | |
"1": 0, | |
"5": 0.01 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:48.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:48.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 266, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"bytes": 1540401458, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13609630 | |
}, | |
"name": "ens192", | |
"in": { | |
"dropped": 1698, | |
"bytes": 8801729934, | |
"packets": 33953393, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:48.242-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:48.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"packets": 1707561, | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6594647777 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 1707561, | |
"bytes": 6594647777, | |
"errors": 0 | |
}, | |
"name": "lo" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 289 | |
} | |
} | |
2018-06-19T10:52:48.243-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:48.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 298, | |
"name": "network", | |
"module": "system" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:48.243-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:48.242Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 590 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:48.315-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:48.280Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 35468, | |
"namespace": "system.process.summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"total": 189, | |
"sleeping": 189, | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:48.453-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T10:52:48.455-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 95455 | |
}, | |
"system": { | |
"process": { | |
"ppid": 27887, | |
"pgid": 28171, | |
"state": "sleeping", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 28171, | |
"username": "root", | |
"cwd": "/etc/metricbeat", | |
"cpu": { | |
"total": { | |
"value": 4860, | |
"pct": 0.017, | |
"norm": { | |
"pct": 0.0042 | |
} | |
}, | |
"start_time": "2018-06-19T17:48:18.000Z" | |
}, | |
"name": "metricbeat", | |
"memory": { | |
"size": 709009408, | |
"rss": { | |
"bytes": 28692480, | |
"pct": 0.0035 | |
}, | |
"share": 13889536 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:48.455-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"name": "metricbeat", | |
"cwd": "/", | |
"ppid": 1, | |
"pgid": 6389, | |
"username": "root", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"cpu": { | |
"total": { | |
"value": 7.04969e+06, | |
"pct": 0.017, | |
"norm": { | |
"pct": 0.0042 | |
} | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
}, | |
"pid": 6389, | |
"memory": { | |
"size": 928202752, | |
"rss": { | |
"bytes": 30429184, | |
"pct": 0.0037 | |
}, | |
"share": 14041088 | |
}, | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
} | |
} | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 95494, | |
"name": "process" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:48.455-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"cmdline": "/usr/lib/systemd/systemd --switched-root --system --deserialize 21", | |
"cwd": "/", | |
"ppid": 0, | |
"memory": { | |
"size": 195588096, | |
"rss": { | |
"pct": 0.0005, | |
"bytes": 4194304 | |
}, | |
"share": 2605056 | |
}, | |
"username": "root", | |
"fd": { | |
"open": 49, | |
"limit": { | |
"soft": 65536, | |
"hard": 65536 | |
} | |
}, | |
"pid": 1, | |
"name": "systemd", | |
"pgid": 1, | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"value": 187900, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
}, | |
"start_time": "2018-06-12T23:28:51.000Z" | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 95500, | |
"name": "process" | |
} | |
} | |
2018-06-19T10:52:48.455-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"name": "python", | |
"username": "root", | |
"cwd": "/", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 11 | |
}, | |
"pid": 1168, | |
"state": "sleeping", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"cpu": { | |
"total": { | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0002 | |
}, | |
"value": 1.26811e+06 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"ppid": 1, | |
"pgid": 1168, | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 95854 | |
} | |
} | |
2018-06-19T10:52:48.455-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 96002, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"cmdline": "/usr/bin/vmtoolsd", | |
"cwd": "/", | |
"pgid": 747, | |
"fd": { | |
"open": 8, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"pid": 747, | |
"name": "vmtoolsd", | |
"username": "root", | |
"memory": { | |
"share": 4878336, | |
"size": 312348672, | |
"rss": { | |
"bytes": 6344704, | |
"pct": 0.0008 | |
} | |
}, | |
"cpu": { | |
"total": { | |
"value": 610770, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0002 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:16.000Z" | |
}, | |
"ppid": 1, | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:48.455-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 96144 | |
}, | |
"system": { | |
"process": { | |
"name": "gnome-shell", | |
"pgid": 1674, | |
"username": "gdm", | |
"cwd": "/var/lib/gdm", | |
"ppid": 1674, | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142864384, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"cmdline": "/usr/bin/gnome-shell", | |
"cpu": { | |
"total": { | |
"value": 201520, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"state": "sleeping", | |
"pid": 1714 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T10:52:48.456-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T17:52:48.359Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 96291 | |
}, | |
"system": { | |
"process": { | |
"name": "systemd-journal", | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"ppid": 1, | |
"username": "root", | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"value": 45750, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"pid": 509, | |
"pgid": 509, | |
"state": "sleeping", | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"pct": 0.0029, | |
"bytes": 23957504 | |
}, | |
"share": 23560192 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T10:52:49.242-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
^C2018-06-19T10:52:57.165-0700 DEBUG [service] service/service.go:33 Received sigterm/sigint, stopping | |
2018-06-19T10:52:57.166-0700 INFO cfgfile/reload.go:222 Dynamic config reloader stopped | |
2018-06-19T10:52:57.166-0700 INFO instance/beat.go:308 metricbeat stopped. | |
2018-06-19T10:52:57.167-0700 INFO [monitoring] log/log.go:132 Total non-zero metrics {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":2180,"time":2187},"total":{"ticks":4870,"time":4880,"value":4870},"user":{"ticks":2690,"time":2693}},"info":{"ephemeral_id":"b8779173-060a-43f9-be93-1ad877af938a","uptime":{"ms":278990}},"memstats":{"gc_next":7324496,"memory_alloc":3757608,"memory_total":423922480,"rss":28696576}},"libbeat":{"config":{"module":{"running":3,"starts":3},"reloads":1},"output":{"events":{"acked":462,"batches":28,"total":462},"read":{"bytes":168},"type":"logstash","write":{"bytes":62522}},"pipeline":{"clients":6,"events":{"active":0,"filtered":130,"published":462,"retry":27,"total":592},"queue":{"acked":462}}},"metricbeat":{"system":{"cpu":{"events":28,"success":28},"filesystem":{"events":165,"success":165},"fsstat":{"events":5,"success":5},"load":{"events":28,"success":28},"memory":{"events":28,"success":28},"network":{"events":112,"success":112},"process":{"events":197,"success":197},"process_summary":{"events":28,"success":28},"uptime":{"events":1,"success":1}}},"system":{"cpu":{"cores":4},"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-19T10:52:57.168-0700 INFO [monitoring] log/log.go:133 Uptime: 4m38.991012646s | |
2018-06-19T10:52:57.168-0700 INFO [monitoring] log/log.go:110 Stopping metrics logging. | |
]0;root@lin-play-02:/etc/metricbeatlin-play-02>root>>/etc/metricbeat>>login as: root | |
root@162.70.26.89's password: | |
Last login: Tue Jun 19 10:46:12 2018 from 162.70.129.30 | |
]0;root@lin-play-02:~[?1034hlin-play-02>root>>/root>>cd[K[Kvi /etc/l[K[K[K[K[Kvar/log/gray[K[K[K[Kmetricbeat/metricbeat [K.log | |
[?1049h[?1h=[1;75r[?12;25h[?12l[?25h[27m[m[H[2J[?25l[75;1H"/var/log/metricbeat/metricbeat.log" [New File][2;1H[1m[34m~ [3;1H~ [4;1H~ [5;1H~ [6;1H~ [7;1H~ [8;1H~ [9;1H~ [10;1H~ [11;1H~ [12;1H~ [13;1H~ [14;1H~ [15;1H~ [16;1H~ [17;1H~ [18;1H~ [19;1H~ [20;1H~ [21;1H~ [22;1H~ [23;1H~ [24;1H~ [25;1H~ [26;1H~ [27;1H~ [28;1H~ [29;1H~ [30;1H~ [31;1H~ [32;1H~ [33;1H~ [34;1H~ [35;1H~ [36;1H~ [37;1H~ [38;1H~ [39;1H~ [40;1H~ [41;1H~ [42;1H~ [43;1H~ [44;1H~ [45;1H~ [46;1H~ [47;1H~ [48;1H~ [49;1H~ [50;1H~ [51;1H~ [52;1H~ [53;1H~ [54;1H~ [55;1H~ [56;1H~ [57;1H~ [58;1H~ [59;1H~ [60;1H~ [61;1H~ [62;1H~ [63;1H~ [64;1H~ [65;1H~ [66;1H~ [67;1H~ [68;1H~ [69;1H~ [70;1H~ [71;1H~ [72;1H~ [73;1H~ [74;1H~ [1;1H[?12l[?25h[?25l[m[75;1H[K[75;1H:[?12l[?25hq | |
[?25l[75;1H[K[75;1H[?1l>[?12l[?25h[?1049l]0;root@lin-play-02:~lin-play-02>root>>/root>>vi /var/log/metricbeat/metricbeat.log | |
[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[2P /var/log/metricbeat/metricbeat.log | |
[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[Cl /var/log/metricbeat/metricbeat.log | |
[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[Cl /var/log/metricbeat/metricbeat.log | |
[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[K[C* | |
-rw------- 1 root root 4962314 Jun 19 11:01 /var/log/metricbeat/metricbeat | |
]0;root@lin-play-02:~lin-play-02>root>>/root>>ll /var/log/metricbeat/metricbeat* | |
[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[K[K | |
total 5828 | |
-rw------- 1 root root 4962314 Jun 19 11:01 metricbeat | |
]0;root@lin-play-02:~lin-play-02>root>>/root>>ll /var/log/metricbeat[2P /var/log/metricbeatc /var/log/metricbeatd /var/log/metricbeat | |
]0;root@lin-play-02:/var/log/metricbeatlin-play-02>root>>/var/log/metricbeat>>ll | |
total 5828 | |
-rw------- 1 root root 4962314 Jun 19 11:01 metricbeat | |
]0;root@lin-play-02:/var/log/metricbeatlin-play-02>root>>/var/log/metricbeat>>cd /etc/metricbeat/ | |
]0;root@lin-play-02:/etc/metricbeatlin-play-02>root>>/etc/metricbeat>>cd /etc/metricbeat//[Kvi vi /var/log/metricbeat/metricbeat.log | |
[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[K | |
[?1049h[?1h=[1;75r[?12;25h[?12l[?25h[27m[m[H[2J[?25l[75;1H"/var/log/metricbeat/metricbeat" 4669L, 4963417C[1;1H2018-06-17T20:08:00.936-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s[8C{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"tii[2;1Hcks":2125120,"time":2125120},"total":{"ticks":4733520,"time":4733528,"value":4733520},"user":{"ticks":2608400,"time":2608408}},"info":{"ephemeral_id":"8c1a3b61-b64a-4e77[3;1Hf-9dd7-868bbe34af55","uptime":{"ms":296790059}},"memstats":{"gc_next":7339568,"memory_alloc":3681048,"memory_total":430145413456}},"libbeat":{"config":{"module":{"runnii[4;1Hng":3}},"output":{"events":{"acked":53,"batches":3,"total":53},"read":{"bytes":18},"write":{"bytes":7200}},"pipeline":{"clients":6,"events":{"active":0,"filtered":26,"pp[5;1Hublished":53,"total":79},"queue":{"acked":53}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"filesystem":{"events":32,"success":32},"fsstat":{"events":1,"succ[6;1Hcess":1},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":22,"success":22},"process_summary":{{[7;1H"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-17T20:08:30.936-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s[8C{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"tii[9;1Hcks":2125340,"time":2125342},"total":{"ticks":4733990,"time":4734001,"value":4733990},"user":{"ticks":2608650,"time":2608659}},"info":{"ephemeral_id":"8c1a3b61-b64a-4e77[10;1Hf-9dd7-868bbe34af55","uptime":{"ms":296820059}},"memstats":{"gc_next":7327696,"memory_alloc":3678440,"memory_total":430188959040}},"libbeat":{"config":{"module":{"runnii[11;1Hng":3}},"output":{"events":{"acked":46,"batches":3,"total":46},"read":{"bytes":18},"write":{"bytes":6478}},"pipeline":{"clients":6,"events":{"active":0,"published":46,""[12;1Htotal":46},"queue":{"acked":46}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"ee[13;1Hvents":12,"success":12},"process":{"events":22,"success":22},"process_summary":{"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15"::[14;1H0.0125,"5":0.0025}}}}}} | |
2018-06-17T20:09:00.936-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s[8C{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"tii[16;1Hcks":2125550,"time":2125552},"total":{"ticks":4734450,"time":4734460,"value":4734450},"user":{"ticks":2608900,"time":2608908}},"info":{"ephemeral_id":"8c1a3b61-b64a-4e77[17;1Hf-9dd7-868bbe34af55","uptime":{"ms":296850059}},"memstats":{"gc_next":7334976,"memory_alloc":3685848,"memory_total":430232800504}},"libbeat":{"config":{"module":{"runnii[18;1Hng":3}},"output":{"events":{"acked":54,"batches":3,"total":54},"read":{"bytes":18},"write":{"bytes":7202}},"pipeline":{"clients":6,"events":{"active":0,"filtered":26,"pp[19;1Hublished":54,"total":80},"queue":{"acked":54}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"filesystem":{"events":32,"success":32},"fsstat":{"events":1,"succ[20;1Hcess":1},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":23,"success":23},"process_summary":{{[21;1H"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-17T20:09:30.936-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s[8C{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"tii[23;1Hcks":2125760,"time":2125765},"total":{"ticks":4734920,"time":4734928,"value":4734920},"user":{"ticks":2609160,"time":2609163}},"info":{"ephemeral_id":"8c1a3b61-b64a-4e77[24;1Hf-9dd7-868bbe34af55","uptime":{"ms":296880059}},"memstats":{"gc_next":7352400,"memory_alloc":3684376,"memory_total":430276982544}},"libbeat":{"config":{"module":{"runnii[25;1Hng":3}},"output":{"events":{"acked":47,"batches":3,"total":47},"read":{"bytes":18},"write":{"bytes":6589}},"pipeline":{"clients":6,"events":{"active":0,"published":47,""[26;1Htotal":47},"queue":{"acked":47}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"ee[27;1Hvents":12,"success":12},"process":{"events":23,"success":23},"process_summary":{"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15"::[28;1H0.0125,"5":0.0025}}}}}} | |
2018-06-17T20:10:00.936-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s[8C{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"tii[30;1Hcks":2125960,"time":2125969},"total":{"ticks":4735370,"time":4735381,"value":4735370},"user":{"ticks":2609410,"time":2609412}},"info":{"ephemeral_id":"8c1a3b61-b64a-4e77[31;1Hf-9dd7-868bbe34af55","uptime":{"ms":296910059}},"memstats":{"gc_next":7342288,"memory_alloc":3681192,"memory_total":430320427640}},"libbeat":{"config":{"module":{"runnii[32;1Hng":3}},"output":{"events":{"acked":54,"batches":3,"total":54},"read":{"bytes":18},"write":{"bytes":7350}},"pipeline":{"clients":6,"events":{"active":0,"filtered":26,"pp[33;1Hublished":54,"total":80},"queue":{"acked":54}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"filesystem":{"events":32,"success":32},"fsstat":{"events":1,"succ[34;1Hcess":1},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":23,"success":23},"process_summary":{{[35;1H"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-17T20:10:30.936-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s[8C{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"tii[37;1Hcks":2126170,"time":2126176},"total":{"ticks":4735810,"time":4735825,"value":4735810},"user":{"ticks":2609640,"time":2609649}},"info":{"ephemeral_id":"8c1a3b61-b64a-4e77[38;1Hf-9dd7-868bbe34af55","uptime":{"ms":296940060}},"memstats":{"gc_next":4680864,"memory_alloc":3769016,"memory_total":430364281384}},"libbeat":{"config":{"module":{"runnii[39;1Hng":3}},"output":{"events":{"acked":47,"batches":3,"total":47},"read":{"bytes":18},"write":{"bytes":6740}},"pipeline":{"clients":6,"events":{"active":0,"published":47,""[40;1Htotal":47},"queue":{"acked":47}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"ee[41;1Hvents":12,"success":12},"process":{"events":23,"success":23},"process_summary":{"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15"::[42;1H0.0125,"5":0.0025}}}}}} | |
2018-06-17T20:11:00.936-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s[8C{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"tii[44;1Hcks":2126410,"time":2126411},"total":{"ticks":4736290,"time":4736292,"value":4736290},"user":{"ticks":2609880,"time":2609881}},"info":{"ephemeral_id":"8c1a3b61-b64a-4e77[45;1Hf-9dd7-868bbe34af55","uptime":{"ms":296970059}},"memstats":{"gc_next":7324336,"memory_alloc":3679368,"memory_total":430408233800}},"libbeat":{"config":{"module":{"runnii[46;1Hng":3}},"output":{"events":{"acked":54,"batches":3,"total":54},"read":{"bytes":18},"write":{"bytes":7394}},"pipeline":{"clients":6,"events":{"active":0,"filtered":26,"pp[47;1Hublished":54,"total":80},"queue":{"acked":54}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"filesystem":{"events":32,"success":32},"fsstat":{"events":1,"succ[48;1Hcess":1},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":23,"success":23},"process_summary":{{[49;1H"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-17T20:11:30.936-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s[8C{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"tii[51;1Hcks":2126630,"time":2126630},"total":{"ticks":4736750,"time":4736756,"value":4736750},"user":{"ticks":2610120,"time":2610126}},"info":{"ephemeral_id":"8c1a3b61-b64a-4e77[52;1Hf-9dd7-868bbe34af55","uptime":{"ms":297000059}},"memstats":{"gc_next":4728720,"memory_alloc":3713368,"memory_total":430452629992}},"libbeat":{"config":{"module":{"runnii[53;1Hng":3}},"output":{"events":{"acked":46,"batches":3,"total":46},"read":{"bytes":18},"write":{"bytes":6401}},"pipeline":{"clients":6,"events":{"active":0,"published":46,""[54;1Htotal":46},"queue":{"acked":46}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"ee[55;1Hvents":12,"success":12},"process":{"events":22,"success":22},"process_summary":{"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15"::[56;1H0.0125,"5":0.0025}}}}}} | |
2018-06-17T20:12:00.936-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s[8C{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"tii[58;1Hcks":2126840,"time":2126842},"total":{"ticks":4737220,"time":4737226,"value":4737220},"user":{"ticks":2610380,"time":2610384}},"info":{"ephemeral_id":"8c1a3b61-b64a-4e77[59;1Hf-9dd7-868bbe34af55","uptime":{"ms":297030059}},"memstats":{"gc_next":7321536,"memory_alloc":3679016,"memory_total":430496264616}},"libbeat":{"config":{"module":{"runnii[60;1Hng":3}},"output":{"events":{"acked":55,"batches":3,"total":55},"read":{"bytes":18},"write":{"bytes":7218}},"pipeline":{"clients":6,"events":{"active":0,"filtered":26,"pp[61;1Hublished":55,"total":81},"queue":{"acked":55}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"filesystem":{"events":32,"success":32},"fsstat":{"events":1,"succ[62;1Hcess":1},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":23,"success":23},"process_summary":{{[63;1H"events":3,"success":3},"uptime":{"events":1,"success":1}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-17T20:12:30.936-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s[8C{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"tii[65;1Hcks":2127060,"time":2127065},"total":{"ticks":4737690,"time":4737703,"value":4737690},"user":{"ticks":2610630,"time":2610638}},"info":{"ephemeral_id":"8c1a3b61-b64a-4e77[66;1Hf-9dd7-868bbe34af55","uptime":{"ms":297060060}},"memstats":{"gc_next":7327728,"memory_alloc":3759144,"memory_total":430540095424}},"libbeat":{"config":{"module":{"runnii[67;1Hng":3}},"output":{"events":{"acked":47,"batches":3,"total":47},"read":{"bytes":18},"write":{"bytes":6650}},"pipeline":{"clients":6,"events":{"active":0,"published":47,""[68;1Htotal":47},"queue":{"acked":47}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"ee[69;1Hvents":12,"success":12},"process":{"events":23,"success":23},"process_summary":{"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15"::[70;1H0.0125,"5":0.0025}}}}}} | |
2018-06-17T20:13:00.936-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s[8C{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"tii[72;1Hcks":2127270,"time":2127275},"total":{"ticks":4738180,"time":4738192,"value":4738180},"user":{"ticks":2610910,"time":2610917}},"info":{"ephemeral_id":"8c1a3b61-b64a-4e77[73;1Hf-9dd7-868bbe34af55","uptime":{"ms":297090059}},"memstats":{"gc_next":7320528,"memory_alloc":3671624,"memory_total":430583671272}},"libbeat":{"config":{"module":{"runnii[74;1Hng":3}},"output":{"events":{"acked":53,"batches":3,"total":53},"read":{"bytes":18},"write":{"bytes":7177}},"pipeline":{"clients":6,"events":{"active":0,"filtered":26,"p[71;1H[1m[34m@ [72;1H@ [73;1H@ [74;1H@ [1;1H[?12l[?25h[?25l[27m[m[H[2J[1;1H2018-06-19T10:57:30.936-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s[8C{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"tii[2;1Hcks":3159410,"time":3159415},"total":{"ticks":7054470,"time":7054478,"value":7054470},"user":{"ticks":3895060,"time":3895063}},"info":{"ephemeral_id":"8c1a3b61-b64a-4e77[3;1Hf-9dd7-868bbe34af55","uptime":{"ms":436560060}},"memstats":{"gc_next":7344336,"memory_alloc":3765256,"memory_total":633441995624}},"libbeat":{"config":{"module":{"runnii[4;1Hng":3}},"output":{"events":{"acked":47,"batches":3,"total":47},"read":{"bytes":18},"write":{"bytes":6486}},"pipeline":{"clients":6,"events":{"active":0,"published":47,""[5;1Htotal":47},"queue":{"acked":47}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"ee[6;1Hvents":12,"success":12},"process":{"events":23,"success":23},"process_summary":{"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15"::[7;1H0.0125,"5":0.0025}}}}}} | |
2018-06-19T10:58:00.936-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s[8C{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"tii[9;1Hcks":3159670,"time":3159671},"total":{"ticks":7055060,"time":7055066,"value":7055060},"user":{"ticks":3895390,"time":3895395}},"info":{"ephemeral_id":"8c1a3b61-b64a-4e77[10;1Hf-9dd7-868bbe34af55","uptime":{"ms":436590059}},"memstats":{"gc_next":7336720,"memory_alloc":3685400,"memory_total":633486088624}},"libbeat":{"config":{"module":{"runnii[11;1Hng":3}},"output":{"events":{"acked":57,"batches":3,"total":57},"read":{"bytes":18},"write":{"bytes":7466}},"pipeline":{"clients":6,"events":{"active":0,"filtered":26,"pp[12;1Hublished":57,"total":83},"queue":{"acked":57}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"filesystem":{"events":33,"success":33},"fsstat":{"events":1,"succ[13;1Hcess":1},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":25,"success":25},"process_summary":{{[14;1H"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-19T10:58:30.936-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s[8C{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"tii[16;1Hcks":3159900,"time":3159907},"total":{"ticks":7055560,"time":7055570,"value":7055560},"user":{"ticks":3895660,"time":3895663}},"info":{"ephemeral_id":"8c1a3b61-b64a-4e77[17;1Hf-9dd7-868bbe34af55","uptime":{"ms":436620060}},"memstats":{"gc_next":7358960,"memory_alloc":3764728,"memory_total":633530183376}},"libbeat":{"config":{"module":{"runnii[18;1Hng":3}},"output":{"events":{"acked":47,"batches":3,"total":47},"read":{"bytes":18},"write":{"bytes":6523}},"pipeline":{"clients":6,"events":{"active":0,"published":47,""[19;1Htotal":47},"queue":{"acked":47}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"ee[20;1Hvents":12,"success":12},"process":{"events":23,"success":23},"process_summary":{"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15"::[21;1H0.0125,"5":0.0025}}}}}} | |
2018-06-19T10:59:00.938-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s[8C{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"tii[23;1Hcks":3160140,"time":3160150},"total":{"ticks":7056090,"time":7056107,"value":7056090},"user":{"ticks":3895950,"time":3895957}},"info":{"ephemeral_id":"8c1a3b61-b64a-4e77[24;1Hf-9dd7-868bbe34af55","uptime":{"ms":436650063}},"memstats":{"gc_next":4314992,"memory_alloc":4263904,"memory_total":633574045424}},"libbeat":{"config":{"module":{"runnii[25;1Hng":3}},"output":{"events":{"acked":56,"batches":3,"total":56},"read":{"bytes":18},"write":{"bytes":7548}},"pipeline":{"clients":6,"events":{"active":0,"filtered":26,"pp[26;1Hublished":56,"total":82},"queue":{"acked":56}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"filesystem":{"events":33,"success":33},"fsstat":{"events":1,"succ[27;1Hcess":1},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":24,"success":24},"process_summary":{{[28;1H"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-19T10:59:30.937-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s[8C{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"tii[30;1Hcks":3160380,"time":3160389},"total":{"ticks":7056630,"time":7056644,"value":7056630},"user":{"ticks":3896250,"time":3896255}},"info":{"ephemeral_id":"8c1a3b61-b64a-4e77[31;1Hf-9dd7-868bbe34af55","uptime":{"ms":436680059}},"memstats":{"gc_next":7341936,"memory_alloc":3688616,"memory_total":633618275176}},"libbeat":{"config":{"module":{"runnii[32;1Hng":3}},"output":{"events":{"acked":47,"batches":3,"total":47},"read":{"bytes":18},"write":{"bytes":6598}},"pipeline":{"clients":6,"events":{"active":0,"published":47,""[33;1Htotal":47},"queue":{"acked":47}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"ee[34;1Hvents":12,"success":12},"process":{"events":23,"success":23},"process_summary":{"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15"::[35;1H0.0125,"5":0.0025}}}}}} | |
2018-06-19T11:00:00.937-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s[8C{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"tii[37;1Hcks":3160630,"time":3160637},"total":{"ticks":7057170,"time":7057183,"value":7057170},"user":{"ticks":3896540,"time":3896546}},"info":{"ephemeral_id":"8c1a3b61-b64a-4e77[38;1Hf-9dd7-868bbe34af55","uptime":{"ms":436710060}},"memstats":{"gc_next":4672752,"memory_alloc":3763288,"memory_total":633662109496}},"libbeat":{"config":{"module":{"runnii[39;1Hng":3}},"output":{"events":{"acked":56,"batches":3,"total":56},"read":{"bytes":18},"write":{"bytes":7460}},"pipeline":{"clients":6,"events":{"active":0,"filtered":26,"pp[40;1Hublished":56,"total":82},"queue":{"acked":56}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"filesystem":{"events":33,"success":33},"fsstat":{"events":1,"succ[41;1Hcess":1},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":24,"success":24},"process_summary":{{[42;1H"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-19T11:00:30.936-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s[8C{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"tii[44;1Hcks":3160940,"time":3160942},"total":{"ticks":7057870,"time":7057877,"value":7057870},"user":{"ticks":3896930,"time":3896935}},"info":{"ephemeral_id":"8c1a3b61-b64a-4e77[45;1Hf-9dd7-868bbe34af55","uptime":{"ms":436740059}},"memstats":{"gc_next":7348112,"memory_alloc":3689880,"memory_total":633706047184}},"libbeat":{"config":{"module":{"runnii[46;1Hng":3}},"output":{"events":{"acked":47,"batches":3,"total":47},"read":{"bytes":18},"write":{"bytes":6508}},"pipeline":{"clients":6,"events":{"active":0,"published":47,""[47;1Htotal":47},"queue":{"acked":47}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"ee[48;1Hvents":12,"success":12},"process":{"events":23,"success":23},"process_summary":{"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15"::[49;1H0.0125,"5":0.0025}}}}}} | |
2018-06-19T11:01:00.937-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s[8C{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"tii[51;1Hcks":3161240,"time":3161250},"total":{"ticks":7058530,"time":7058548,"value":7058530},"user":{"ticks":3897290,"time":3897298}},"info":{"ephemeral_id":"8c1a3b61-b64a-4e77[52;1Hf-9dd7-868bbe34af55","uptime":{"ms":436770059}},"memstats":{"gc_next":7330928,"memory_alloc":3679320,"memory_total":633750410544}},"libbeat":{"config":{"module":{"runnii[53;1Hng":3}},"output":{"events":{"acked":56,"batches":3,"total":56},"read":{"bytes":18},"write":{"bytes":7743}},"pipeline":{"clients":6,"events":{"active":0,"filtered":26,"pp[54;1Hublished":56,"total":82},"queue":{"acked":56}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"filesystem":{"events":33,"success":33},"fsstat":{"events":1,"succ[55;1Hcess":1},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":24,"success":24},"process_summary":{{[56;1H"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-19T11:01:30.936-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s[8C{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"tii[58;1Hcks":3161540,"time":3161544},"total":{"ticks":7059220,"time":7059225,"value":7059220},"user":{"ticks":3897680,"time":3897681}},"info":{"ephemeral_id":"8c1a3b61-b64a-4e77[59;1Hf-9dd7-868bbe34af55","uptime":{"ms":436800060}},"memstats":{"gc_next":4488704,"memory_alloc":3889992,"memory_total":633794965440}},"libbeat":{"config":{"module":{"runnii[60;1Hng":3}},"output":{"events":{"acked":46,"batches":3,"total":46},"read":{"bytes":18},"write":{"bytes":6342}},"pipeline":{"clients":6,"events":{"active":0,"published":46,""[61;1Htotal":46},"queue":{"acked":46}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"ee[62;1Hvents":12,"success":12},"process":{"events":22,"success":22},"process_summary":{"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15"::[63;1H0.0125,"5":0.0025}}}}}} | |
2018-06-19T11:02:00.936-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s[8C{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"tii[65;1Hcks":3161860,"time":3161863},"total":{"ticks":7059890,"time":7059898,"value":7059890},"user":{"ticks":3898030,"time":3898035}},"info":{"ephemeral_id":"8c1a3b61-b64a-4e77[66;1Hf-9dd7-868bbe34af55","uptime":{"ms":436830059}},"memstats":{"gc_next":7351152,"memory_alloc":3677320,"memory_total":633839457312}},"libbeat":{"config":{"module":{"runnii[67;1Hng":3}},"output":{"events":{"acked":56,"batches":3,"total":56},"read":{"bytes":18},"write":{"bytes":7542}},"pipeline":{"clients":6,"events":{"active":0,"filtered":26,"pp[68;1Hublished":56,"total":82},"queue":{"acked":56}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"filesystem":{"events":33,"success":33},"fsstat":{"events":1,"succ[69;1Hcess":1},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":24,"success":24},"process_summary":{{[70;1H"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
[1m[34m~ [72;1H~ [73;1H~ [74;1H~ [64;1H[?12l[?25h[?25l[75;1H[m:[?12l[?25hq | |
[?25l[75;1H[K[75;1H[?1l>[?12l[?25h[?1049l]0;root@lin-play-02:/etc/metricbeatlin-play-02>root>>/etc/metricbeat>> | |
[Klin-play-02>root>>/etc/metricbeat>> | |
[Klin-play-02>root>>/etc/metricbeat>>vi /var/log/metricbeat/metricbeat/[Kmetriccd /etc/metricbeat/[C[C[C[Cvar/log/metricbeatll[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C/metricbeat*vi /var/log/metricbeat/metricbeat.log | |
[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[Ctail -f /var/log/metricbeat/metricbeat | |
[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[21Pcat metricbeat.yml[Cd /etc/metricbeat/tail -f /var/log/metricbeat/metricbeat | |
[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[13Pservice metricbeat restart[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[1Pstatus | |
[1;32m●[0m metricbeat.service - metricbeat | |
Loaded: loaded (/usr/lib/systemd/system/metricbeat.service; enabled; vendor preset: disabled) | |
Active: [1;32mactive (running)[0m since Thu 2018-06-14 09:41:30 MST; 5 days ago | |
Docs: https://www.elastic.co/guide/en/beats/metricbeat/current/index.html | |
Main PID: 6389 (metricbeat) | |
CGroup: /system.slice/metricbeat.service | |
└─6389 /usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /va... | |
Jun 14 09:41:30 lin-play-02 systemd[1]: Started metricbeat. | |
Jun 14 09:41:30 lin-play-02 systemd[1]: Starting metricbeat... | |
]0;root@lin-play-02:/etc/metricbeatlin-play-02>root>>/etc/metricbeat>>service metricbeat status/[K -eps -ef|grep -i yumfind . -name "*ssh*" -exec rm -r {} \; | |
[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[3P[C[C[C[C[C[C[C[C[11@type d -name "*ssh*" -exec rm -r | |
[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[Cf -name "*ssh*" -exec rm -f | |
[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[17@ADV3111ROUTRAY*ssh*" -exec ls -ltr | |
[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C^C | |
]0;root@lin-play-02:/etc/metricbeatlin-play-02>root>>/etc/metricbeat>>service metricbeat status/[Kmetricbeatvi /var/log/metricbeat/metricbeat[14Pcd /etc/metricbeat/[C[C[C[Cvar/log/metricbeatll[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C/metricbeat*vi /var/log/metricbeat/metricbeat.log | |
[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[Ctail -f /var/log/metricbeat/metricbeat | |
[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[21Pcat metricbeat.yml[Cd /etc/metricbeat/tail -f /var/log/metricbeat/metricbeat | |
[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[13Pservice metricbeat restart[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[1Pstatus[7Pmetricbeat version[2Pwhich metricbeatservice metricbeat status[8Pvi metricbeat.ymltail -100 /var/log/metricbeat/metricbeat | |
[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[23Pcat metricbeat.ymltail -f /var/log/metricbeat/metricbeat | |
[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[13Pservice metricbeat restart[9Pvi metricbeat.ymltail -f /var/log/metricbeat/metricbeat | |
[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[13Pservice metricbeat restarttail -f /var/log/metricbeat/metricbeat | |
[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C^C | |
]0;root@lin-play-02:/etc/metricbeatlin-play-02>root>>/etc/metricbeat>>history -a | |
]0;root@lin-play-02:/etc/metricbeatlin-play-02>root>>/etc/metricbeat>>cd | |
]0;root@lin-play-02:~lin-play-02>root>>/root>>grep ^metricbeat .bash_history | |
[01;31m[Kmetricbeat[m[K version | |
]0;root@lin-play-02:~lin-play-02>root>>/root>>gre[Cp ^metricbeat .bash_history | |
[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[1P | |
service [01;31m[Kmetricbeat[m[K status | |
service [01;31m[Kmetricbeat[m[Ks status | |
yum install [01;31m[Kmetricbeat[m[K | |
chkconfig [01;31m[Kmetricbeat[m[K on | |
chkconfig on [01;31m[Kmetricbeat[m[K | |
chkconfig --add [01;31m[Kmetricbeat[m[K | |
service [01;31m[Kmetricbeat[m[K status | |
service [01;31m[Kmetricbeat[m[K restart | |
service [01;31m[Kmetricbeat[m[K status | |
service [01;31m[Kmetricbeat[m[K stop | |
cd [01;31m[Kmetricbeat[m[K/ | |
vi [01;31m[Kmetricbeat[m[K.yml | |
grepout [01;31m[Kmetricbeat[m[K.yml | |
vi [01;31m[Kmetricbeat[m[K.yml | |
service [01;31m[Kmetricbeat[m[K restart | |
service [01;31m[Kmetricbeat[m[K status | |
tail -100 /var/log/[01;31m[Kmetricbeat[m[K | |
cd /var/log/[01;31m[Kmetricbeat[m[K | |
cat [01;31m[Kmetricbeat[m[K | |
service [01;31m[Kmetricbeat[m[K restart | |
service [01;31m[Kmetricbeat[m[K status | |
service [01;31m[Kmetricbeat[m[K stop | |
service [01;31m[Kmetricbeat[m[K status | |
service [01;31m[Kmetricbeat[m[K start | |
service [01;31m[Kmetricbeat[m[K restart | |
cd /etc/[01;31m[Kmetricbeat[m[K/ | |
vi [01;31m[Kmetricbeat[m[K.yml | |
service [01;31m[Kmetricbeat[m[K restart | |
vi [01;31m[Kmetricbeat[m[K.yml | |
service [01;31m[Kmetricbeat[m[K restart | |
vi [01;31m[Kmetricbeat[m[K.yml | |
service [01;31m[Kmetricbeat[m[K restart | |
vi [01;31m[Kmetricbeat[m[K.yml | |
service [01;31m[Kmetricbeat[m[K restart | |
vi [01;31m[Kmetricbeat[m[K.yml | |
service [01;31m[Kmetricbeat[m[K restart | |
vi [01;31m[Kmetricbeat[m[K.yml | |
grepout [01;31m[Kmetricbeat[m[K.yml | |
service [01;31m[Kmetricbeat[m[K restart | |
vi [01;31m[Kmetricbeat[m[K.yml | |
service [01;31m[Kmetricbeat[m[K restart | |
vi [01;31m[Kmetricbeat[m[K.yml | |
service [01;31m[Kmetricbeat[m[K restart | |
vi [01;31m[Kmetricbeat[m[K.yml | |
service [01;31m[Kmetricbeat[m[K restart | |
service [01;31m[Kmetricbeat[m[K status | |
service [01;31m[Kmetricbeat[m[K status | |
vi [01;31m[Kmetricbeat[m[K.yml | |
service [01;31m[Kmetricbeat[m[K restart | |
service [01;31m[Kmetricbeat[m[K status | |
vi [01;31m[Kmetricbeat[m[K.yml | |
service [01;31m[Kmetricbeat[m[K restart | |
service [01;31m[Kmetricbeat[m[K status | |
cd /var/log/[01;31m[Kmetricbeat[m[K/ | |
tail -f [01;31m[Kmetricbeat[m[K | |
tail -f [01;31m[Kmetricbeat[m[K | |
tail -f [01;31m[Kmetricbeat[m[K | |
tail -f [01;31m[Kmetricbeat[m[K | |
tail -f [01;31m[Kmetricbeat[m[K | |
tail -f [01;31m[Kmetricbeat[m[K | |
service [01;31m[Kmetricbeat[m[K status | |
cd /etc/[01;31m[Kmetricbeat[m[K/ | |
grepout [01;31m[Kmetricbeat[m[K.yml | |
vi [01;31m[Kmetricbeat[m[K.yml | |
service [01;31m[Kmetricbeat[m[K restart | |
tail -f /var/log/[01;31m[Kmetricbeat[m[K/[01;31m[Kmetricbeat[m[K | |
service [01;31m[Kmetricbeat[m[K status | |
cd [01;31m[Kmetricbeat[m[K/ | |
vi [01;31m[Kmetricbeat[m[K.yml | |
cp [01;31m[Kmetricbeat[m[K.yml [01;31m[Kmetricbeat[m[K.yml.06122018 | |
vi [01;31m[Kmetricbeat[m[K.yml | |
vi [01;31m[Kmetricbeat[m[K.yml | |
grepout [01;31m[Kmetricbeat[m[K.yml | |
grepout [01;31m[Kmetricbeat[m[K.yml|grep -v " #" | |
vi [01;31m[Kmetricbeat[m[K.yml | |
service [01;31m[Kmetricbeat[m[K status | |
cd /var/log/[01;31m[Kmetricbeat[m[K/ | |
tail -f [01;31m[Kmetricbeat[m[K | |
tail -f /var/log/[01;31m[Kmetricbeat[m[K/[01;31m[Kmetricbeat[m[K | |
cd /etc/[01;31m[Kmetricbeat[m[K/ | |
ll /usr/share/[01;31m[Kmetricbeat[m[K/ | |
ll /usr/share/[01;31m[Kmetricbeat[m[K/bin | |
vi [01;31m[Kmetricbeat[m[K.yml | |
service [01;31m[Kmetricbeat[m[K restart | |
service [01;31m[Kmetricbeat[m[K status | |
tail -f /var/log/[01;31m[Kmetricbeat[m[K/[01;31m[Kmetricbeat[m[K | |
tail -f /var/log/[01;31m[Kmetricbeat[m[K/[01;31m[Kmetricbeat[m[K | |
service [01;31m[Kmetricbeat[m[K stop | |
service [01;31m[Kmetricbeat[m[K status | |
service [01;31m[Kmetricbeat[m[K restart | |
tail -f /var/log/[01;31m[Kmetricbeat[m[K/[01;31m[Kmetricbeat[m[K | |
vi [01;31m[Kmetricbeat[m[K.yml | |
service [01;31m[Kmetricbeat[m[K restart | |
tail -f /var/log/[01;31m[Kmetricbeat[m[K/[01;31m[Kmetricbeat[m[K | |
vi [01;31m[Kmetricbeat[m[K.yml | |
service [01;31m[Kmetricbeat[m[K restart | |
vi [01;31m[Kmetricbeat[m[K.yml | |
service [01;31m[Kmetricbeat[m[K restart | |
tail -f /var/log/[01;31m[Kmetricbeat[m[K/[01;31m[Kmetricbeat[m[K | |
service [01;31m[Kmetricbeat[m[K restart | |
tail -f /var/log/[01;31m[Kmetricbeat[m[K/[01;31m[Kmetricbeat[m[K | |
vi [01;31m[Kmetricbeat[m[K.yml | |
service [01;31m[Kmetricbeat[m[K restart | |
tail -f /var/log/[01;31m[Kmetricbeat[m[K/[01;31m[Kmetricbeat[m[K | |
cat [01;31m[Kmetricbeat[m[K.yml | |
tail -100 /var/log/[01;31m[Kmetricbeat[m[K/[01;31m[Kmetricbeat[m[K | |
vi [01;31m[Kmetricbeat[m[K.yml | |
service [01;31m[Kmetricbeat[m[K status | |
which [01;31m[Kmetricbeat[m[K | |
[01;31m[Kmetricbeat[m[K version | |
service [01;31m[Kmetricbeat[m[K status | |
service [01;31m[Kmetricbeat[m[K restart | |
tail -f /var/log/[01;31m[Kmetricbeat[m[K/[01;31m[Kmetricbeat[m[K | |
cd /etc/[01;31m[Kmetricbeat[m[K/ | |
cat [01;31m[Kmetricbeat[m[K.yml | |
tail -f /var/log/[01;31m[Kmetricbeat[m[K/[01;31m[Kmetricbeat[m[K | |
vi /var/log/[01;31m[Kmetricbeat[m[K/[01;31m[Kmetricbeat[m[K.log | |
ll /var/log/[01;31m[Kmetricbeat[m[K/[01;31m[Kmetricbeat[m[K* | |
ll /var/log/[01;31m[Kmetricbeat[m[K | |
cd /var/log/[01;31m[Kmetricbeat[m[K | |
cd /etc/[01;31m[Kmetricbeat[m[K/ | |
vi /var/log/[01;31m[Kmetricbeat[m[K/[01;31m[Kmetricbeat[m[K | |
service [01;31m[Kmetricbeat[m[K status | |
]0;root@lin-play-02:~lin-play-02>root>>/root>>metricbeat -e -d "*" | |
2018-06-19T11:10:09.464-0700 INFO instance/beat.go:468 Home path: [/usr/share/metricbeat] Config path: [/etc/metricbeat] Data path: [/var/lib/metricbeat] Logs path: [/var/log/metricbeat] | |
2018-06-19T11:10:09.464-0700 DEBUG [beat] instance/beat.go:495 Beat metadata path: /var/lib/metricbeat/meta.json | |
2018-06-19T11:10:09.464-0700 INFO instance/beat.go:475 Beat UUID: c333adf1-4565-43e3-940a-1ae5654b8e8e | |
2018-06-19T11:10:09.464-0700 INFO instance/beat.go:213 Setup Beat: metricbeat; Version: 6.2.4 | |
2018-06-19T11:10:09.464-0700 DEBUG [beat] instance/beat.go:230 Initializing output plugins | |
2018-06-19T11:10:09.464-0700 DEBUG [processors] processors/processor.go:49 Processors: | |
2018-06-19T11:10:09.465-0700 INFO pipeline/module.go:76 Beat name: lin-play-02 | |
2018-06-19T11:10:09.465-0700 DEBUG [modules] beater/metricbeat.go:80 Register [ModuleFactory:[docker, mongodb, mysql, postgresql, system, uwsgi], MetricSetFactory:[aerospike/namespace, apache/status, ceph/cluster_disk, ceph/cluster_health, ceph/cluster_status, ceph/monitor_health, ceph/osd_df, ceph/osd_tree, ceph/pool_disk, couchbase/bucket, couchbase/cluster, couchbase/node, docker/container, docker/cpu, docker/diskio, docker/healthcheck, docker/image, docker/info, docker/memory, docker/network, dropwizard/collector, elasticsearch/node, elasticsearch/node_stats, etcd/leader, etcd/self, etcd/store, golang/expvar, golang/heap, graphite/server, haproxy/info, haproxy/stat, http/json, http/server, jolokia/jmx, kafka/consumergroup, kafka/partition, kibana/status, kubernetes/container, kubernetes/event, kubernetes/node, kubernetes/pod, kubernetes/state_container, kubernetes/state_deployment, kubernetes/state_node, kubernetes/state_pod, kubernetes/state_replicaset, kubernetes/system, kubernetes/volume, logstash/node, logstash/node_stats, memcached/stats, mongodb/collstats, mongodb/dbstats, mongodb/status, mysql/status, nginx/stubstatus, php_fpm/pool, postgresql/activity, postgresql/bgwriter, postgresql/database, prometheus/collector, prometheus/stats, rabbitmq/node, rabbitmq/queue, redis/info, redis/keyspace, system/core, system/cpu, system/diskio, system/filesystem, system/fsstat, system/load, system/memory, system/network, system/process, system/process_summary, system/raid, system/socket, system/uptime, uwsgi/status, vsphere/datastore, vsphere/host, vsphere/virtualmachine, zookeeper/mntr]] | |
2018-06-19T11:10:09.465-0700 INFO [monitoring] log/log.go:97 Starting metrics logging every 30s | |
2018-06-19T11:10:09.466-0700 INFO instance/beat.go:301 metricbeat start running. | |
2018-06-19T11:10:09.466-0700 DEBUG [cfgfile] cfgfile/reload.go:95 Checking module configs from: /etc/metricbeat/modules.d/*.yml | |
2018-06-19T11:10:09.466-0700 DEBUG [cfgfile] cfgfile/cfgfile.go:143 Load config from file: /etc/metricbeat/modules.d/system.yml | |
2018-06-19T11:10:09.466-0700 DEBUG [cfgfile] cfgfile/reload.go:109 Number of module configs found: 3 | |
2018-06-19T11:10:09.466-0700 DEBUG [processors] processors/processor.go:49 Processors: | |
2018-06-19T11:10:09.467-0700 DEBUG [system.process] process/process.go:65 process cgroup data collection is enabled, using hostfs='' | |
2018-06-19T11:10:09.467-0700 DEBUG [processors] processors/condition.go:97 New condition regexp: map[system.filesystem.mount_point:\A/(?:sys|cgroup|proc|dev|etc|host|lib)(?:(?-m:$)|/)] | |
2018-06-19T11:10:09.468-0700 DEBUG [processors] processors/processor.go:49 Processors: drop_event, condition=regexp: map[system.filesystem.mount_point:\A/(?:sys|cgroup|proc|dev|etc|host|lib)(?:(?-m:$)|/)] | |
2018-06-19T11:10:09.468-0700 DEBUG [processors] processors/processor.go:49 Processors: | |
2018-06-19T11:10:09.468-0700 INFO cfgfile/reload.go:127 Config reloader started | |
2018-06-19T11:10:09.468-0700 DEBUG [cfgfile] cfgfile/reload.go:151 Scan for new config files | |
2018-06-19T11:10:09.468-0700 DEBUG [cfgfile] cfgfile/cfgfile.go:143 Load config from file: /etc/metricbeat/modules.d/system.yml | |
2018-06-19T11:10:09.469-0700 DEBUG [cfgfile] cfgfile/reload.go:170 Number of module configs found: 3 | |
2018-06-19T11:10:09.469-0700 DEBUG [cfgfile] cfgfile/reload.go:198 Remove module from stoplist: 1283936486514163240 | |
2018-06-19T11:10:09.469-0700 DEBUG [cfgfile] cfgfile/reload.go:203 Add module to startlist: 1283936486514163240 | |
2018-06-19T11:10:09.469-0700 DEBUG [processors] processors/processor.go:49 Processors: | |
2018-06-19T11:10:09.469-0700 DEBUG [system.process] process/process.go:65 process cgroup data collection is enabled, using hostfs='' | |
2018-06-19T11:10:09.469-0700 DEBUG [cfgfile] cfgfile/reload.go:198 Remove module from stoplist: 6259003571077527891 | |
2018-06-19T11:10:09.469-0700 DEBUG [cfgfile] cfgfile/reload.go:203 Add module to startlist: 6259003571077527891 | |
2018-06-19T11:10:09.470-0700 DEBUG [processors] processors/condition.go:97 New condition regexp: map[system.filesystem.mount_point:\A/(?:sys|cgroup|proc|dev|etc|host|lib)(?:(?-m:$)|/)] | |
2018-06-19T11:10:09.470-0700 DEBUG [processors] processors/processor.go:49 Processors: drop_event, condition=regexp: map[system.filesystem.mount_point:\A/(?:sys|cgroup|proc|dev|etc|host|lib)(?:(?-m:$)|/)] | |
2018-06-19T11:10:09.470-0700 DEBUG [cfgfile] cfgfile/reload.go:198 Remove module from stoplist: 8560891566631850026 | |
2018-06-19T11:10:09.470-0700 DEBUG [cfgfile] cfgfile/reload.go:203 Add module to startlist: 8560891566631850026 | |
2018-06-19T11:10:09.470-0700 DEBUG [processors] processors/processor.go:49 Processors: | |
2018-06-19T11:10:09.470-0700 INFO cfgfile/reload.go:258 Starting 3 runners ... | |
2018-06-19T11:10:09.470-0700 DEBUG [module] module/wrapper.go:100 Starting Wrapper[name=system, len(metricSetWrappers)=1] | |
2018-06-19T11:10:09.470-0700 DEBUG [cfgfile] cfgfile/reload.go:265 New runner started: 8560891566631850026 | |
2018-06-19T11:10:09.470-0700 DEBUG [module] module/wrapper.go:100 Starting Wrapper[name=system, len(metricSetWrappers)=6] | |
2018-06-19T11:10:09.470-0700 DEBUG [cfgfile] cfgfile/reload.go:265 New runner started: 1283936486514163240 | |
2018-06-19T11:10:09.470-0700 DEBUG [module] module/wrapper.go:154 Starting metricSetWrapper[module=system, name=uptime, host=] | |
2018-06-19T11:10:09.470-0700 DEBUG [module] module/wrapper.go:154 Starting metricSetWrapper[module=system, name=network, host=] | |
2018-06-19T11:10:09.470-0700 DEBUG [module] module/wrapper.go:100 Starting Wrapper[name=system, len(metricSetWrappers)=2] | |
2018-06-19T11:10:09.470-0700 DEBUG [module] module/wrapper.go:154 Starting metricSetWrapper[module=system, name=memory, host=] | |
2018-06-19T11:10:09.470-0700 DEBUG [cfgfile] cfgfile/reload.go:265 New runner started: 6259003571077527891 | |
2018-06-19T11:10:09.470-0700 INFO cfgfile/reload.go:219 Loading of config files completed. | |
2018-06-19T11:10:09.470-0700 DEBUG [module] module/wrapper.go:154 Starting metricSetWrapper[module=system, name=filesystem, host=] | |
2018-06-19T11:10:09.471-0700 DEBUG [module] module/wrapper.go:154 Starting metricSetWrapper[module=system, name=process_summary, host=] | |
2018-06-19T11:10:09.471-0700 DEBUG [module] module/wrapper.go:154 Starting metricSetWrapper[module=system, name=cpu, host=] | |
2018-06-19T11:10:09.471-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.470Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 209 | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"bytes": 1542693021, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13633505 | |
}, | |
"name": "ens192", | |
"in": { | |
"dropped": 1698, | |
"bytes": 8819731950, | |
"packets": 34054922, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:09.471-0700 DEBUG [module] module/wrapper.go:154 Starting metricSetWrapper[module=system, name=load, host=] | |
2018-06-19T11:10:09.471-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.470Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 217 | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"bytes": 6605889179, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1710467 | |
}, | |
"name": "lo", | |
"in": { | |
"dropped": 0, | |
"bytes": 6605889179, | |
"packets": 1710467, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:09.471-0700 DEBUG [module] module/wrapper.go:154 Starting metricSetWrapper[module=system, name=process, host=] | |
2018-06-19T11:10:09.471-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.470Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 220, | |
"name": "network", | |
"module": "system" | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
}, | |
"name": "virbr0-nic" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:09.471-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.470Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 558, | |
"name": "filesystem" | |
}, | |
"system": { | |
"filesystem": { | |
"free_files": 18077681, | |
"type": "rootfs", | |
"files": 18317312, | |
"mount_point": "/", | |
"device_name": "rootfs", | |
"available": 12062756864, | |
"used": { | |
"pct": 0.3565, | |
"bytes": 6683684864 | |
}, | |
"total": 18746441728, | |
"free": 12062756864 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:09.471-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.470Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "uptime", | |
"module": "system", | |
"rtt": 21 | |
}, | |
"system": { | |
"uptime": { | |
"duration": { | |
"ms": 585679000 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:09.471-0700 DEBUG [module] module/wrapper.go:154 Starting metricSetWrapper[module=system, name=fsstat, host=] | |
2018-06-19T11:10:09.472-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.470Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 959 | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
}, | |
"system": { | |
"filesystem": { | |
"files": 1001309, | |
"used": { | |
"pct": 0.0186, | |
"bytes": 76468224 | |
}, | |
"device_name": "tmpfs", | |
"type": "tmpfs", | |
"free": 4024893440, | |
"total": 4101361664, | |
"mount_point": "/run", | |
"available": 4024893440, | |
"free_files": 1000756 | |
} | |
} | |
} | |
2018-06-19T11:10:09.472-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: / total=18746441728, used=6683684864, free=12062756864 | |
2018-06-19T11:10:09.472-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys total=0, used=0, free=0 | |
2018-06-19T11:10:09.472-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc total=0, used=0, free=0 | |
2018-06-19T11:10:09.472-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev total=4084723712, used=0, free=4084723712 | |
2018-06-19T11:10:09.472-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/security total=0, used=0, free=0 | |
2018-06-19T11:10:09.472-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/shm total=4101361664, used=81920, free=4101279744 | |
2018-06-19T11:10:09.472-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/pts total=0, used=0, free=0 | |
2018-06-19T11:10:09.472-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run total=4101361664, used=76468224, free=4024893440 | |
2018-06-19T11:10:09.472-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup total=4101361664, used=0, free=4101361664 | |
2018-06-19T11:10:09.472-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/systemd total=0, used=0, free=0 | |
2018-06-19T11:10:09.472-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/pstore total=0, used=0, free=0 | |
2018-06-19T11:10:09.472-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/perf_event total=0, used=0, free=0 | |
2018-06-19T11:10:09.472-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.470Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"filesystem": { | |
"type": "xfs", | |
"device_name": "/dev/mapper/rhel-root", | |
"free": 12062756864, | |
"free_files": 18077681, | |
"used": { | |
"pct": 0.3565, | |
"bytes": 6683684864 | |
}, | |
"available": 12062756864, | |
"files": 18317312, | |
"mount_point": "/", | |
"total": 18746441728 | |
} | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 1503 | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:10:09.471-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.470Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 400 | |
}, | |
"system": { | |
"memory": { | |
"total": 8202727424, | |
"used": { | |
"bytes": 1794437120, | |
"pct": 0.2188 | |
}, | |
"free": 6408290304, | |
"actual": { | |
"free": 7299174400, | |
"used": { | |
"pct": 0.1102, | |
"bytes": 903553024 | |
} | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:09.472-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/freezer total=0, used=0, free=0 | |
2018-06-19T11:10:09.474-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/memory total=0, used=0, free=0 | |
2018-06-19T11:10:09.474-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/pids total=0, used=0, free=0 | |
2018-06-19T11:10:09.474-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/cpu,cpuacct total=0, used=0, free=0 | |
2018-06-19T11:10:09.474-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/blkio total=0, used=0, free=0 | |
2018-06-19T11:10:09.474-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/net_cls,net_prio total=0, used=0, free=0 | |
2018-06-19T11:10:09.474-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 92, | |
"name": "cpu" | |
}, | |
"system": { | |
"cpu": { | |
"idle": { | |
"pct": 0 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"cores": 4, | |
"user": { | |
"pct": 0 | |
}, | |
"system": { | |
"pct": 0 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0 | |
}, | |
"steal": { | |
"pct": 0 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:10:09.475-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.470Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 3561 | |
}, | |
"system": { | |
"filesystem": { | |
"type": "xfs", | |
"files": 512000, | |
"used": { | |
"pct": 0.5408, | |
"bytes": 281665536 | |
}, | |
"device_name": "/dev/sda1", | |
"mount_point": "/boot", | |
"total": 520794112, | |
"free": 239128576, | |
"available": 239128576, | |
"free_files": 511656 | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:10:09.475-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 58 | |
}, | |
"system": { | |
"load": { | |
"5": 0.01, | |
"15": 0.05, | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
}, | |
"cores": 4, | |
"1": 0 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:09.475-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.470Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"name": "virbr0", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 1092 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:09.475-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.470Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"filesystem": { | |
"total": 0, | |
"available": 0, | |
"used": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"mount_point": "/var/lib/nfs/rpc_pipefs", | |
"files": 0, | |
"device_name": "sunrpc", | |
"free_files": 0, | |
"type": "rpc_pipefs", | |
"free": 0 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 3584 | |
} | |
} | |
2018-06-19T11:10:09.474-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/devices total=0, used=0, free=0 | |
2018-06-19T11:10:09.475-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/hugetlb total=0, used=0, free=0 | |
2018-06-19T11:10:09.475-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.470Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 4476, | |
"name": "filesystem" | |
}, | |
"system": { | |
"filesystem": { | |
"mount_point": "/run/user/42", | |
"files": 1001309, | |
"type": "tmpfs", | |
"available": 820260864, | |
"total": 820273152, | |
"free": 820260864, | |
"free_files": 1001300, | |
"used": { | |
"pct": 0, | |
"bytes": 12288 | |
}, | |
"device_name": "tmpfs" | |
} | |
} | |
} | |
2018-06-19T11:10:09.475-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.470Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 4525, | |
"name": "filesystem", | |
"module": "system" | |
}, | |
"system": { | |
"filesystem": { | |
"mount_point": "/run/user/0", | |
"free": 820273152, | |
"used": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"type": "tmpfs", | |
"device_name": "tmpfs", | |
"files": 1001309, | |
"free_files": 1001308, | |
"available": 820273152, | |
"total": 820273152 | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:10:09.475-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/cpuset total=0, used=0, free=0 | |
2018-06-19T11:10:09.476-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/config total=0, used=0, free=0 | |
2018-06-19T11:10:09.476-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: / total=18746441728, used=6683684864, free=12062756864 | |
2018-06-19T11:10:09.476-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/sys/fs/binfmt_misc total=0, used=0, free=0 | |
2018-06-19T11:10:09.476-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/mqueue total=0, used=0, free=0 | |
2018-06-19T11:10:09.476-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/hugepages total=0, used=0, free=0 | |
2018-06-19T11:10:09.476-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/debug total=0, used=0, free=0 | |
2018-06-19T11:10:09.476-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/fs/nfsd total=0, used=0, free=0 | |
2018-06-19T11:10:09.476-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /boot total=520794112, used=281665536, free=239128576 | |
2018-06-19T11:10:09.476-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /var/lib/nfs/rpc_pipefs total=0, used=0, free=0 | |
2018-06-19T11:10:09.476-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/sys/fs/binfmt_misc total=0, used=0, free=0 | |
2018-06-19T11:10:09.476-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run/user/42 total=820273152, used=12288, free=820260864 | |
2018-06-19T11:10:09.476-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run/user/0 total=820273152, used=0, free=820273152 | |
2018-06-19T11:10:09.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 4639, | |
"name": "fsstat" | |
}, | |
"system": { | |
"fsstat": { | |
"total_size": { | |
"free": 30254678016, | |
"used": 7041912832, | |
"total": 37296590848 | |
}, | |
"count": 31, | |
"total_files": 24833104 | |
} | |
} | |
} | |
2018-06-19T11:10:09.520-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"namespace": "system.process.summary", | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 48849 | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"sleeping": 189, | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 189 | |
} | |
} | |
} | |
} | |
2018-06-19T11:10:09.607-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 10 processes | |
2018-06-19T11:10:09.610-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 138334, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"pid": 1, | |
"ppid": 0, | |
"cmdline": "/usr/lib/systemd/systemd --switched-root --system --deserialize 21", | |
"cwd": "/", | |
"state": "sleeping", | |
"fd": { | |
"open": 49, | |
"limit": { | |
"soft": 65536, | |
"hard": 65536 | |
} | |
}, | |
"memory": { | |
"size": 195588096, | |
"rss": { | |
"bytes": 4194304, | |
"pct": 0.0005 | |
}, | |
"share": 2605056 | |
}, | |
"cpu": { | |
"total": { | |
"value": 0, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:28:51.000Z" | |
}, | |
"pgid": 1, | |
"name": "systemd", | |
"username": "root" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:10:09.610-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 0, | |
"rss": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"share": 0 | |
}, | |
"cwd": "/", | |
"pid": 2, | |
"name": "kthreadd", | |
"cpu": { | |
"start_time": "2018-06-12T23:28:51.000Z", | |
"total": { | |
"value": 0, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
} | |
}, | |
"state": "sleeping", | |
"pgid": 0, | |
"fd": { | |
"open": 0, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"username": "root", | |
"ppid": 0 | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 138373 | |
} | |
} | |
2018-06-19T11:10:09.610-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 138379, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 0, | |
"pct": 0 | |
}, | |
"start_time": "2018-06-12T23:28:51.000Z" | |
}, | |
"ppid": 2, | |
"username": "root", | |
"pid": 3, | |
"name": "ksoftirqd/0", | |
"state": "sleeping", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 0 | |
}, | |
"pgid": 0, | |
"memory": { | |
"rss": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"share": 0, | |
"size": 0 | |
} | |
} | |
} | |
} | |
2018-06-19T11:10:09.610-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 138758, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 0, | |
"pct": 0 | |
}, | |
"start_time": "2018-06-12T23:28:51.000Z" | |
}, | |
"fd": { | |
"open": 0, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 5, | |
"memory": { | |
"size": 0, | |
"rss": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"share": 0 | |
}, | |
"state": "sleeping", | |
"ppid": 2, | |
"pgid": 0, | |
"username": "root", | |
"name": "kworker/0:0H" | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:10:09.610-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 138872 | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 0 | |
}, | |
"start_time": "2018-06-12T23:28:51.000Z" | |
}, | |
"pid": 7, | |
"name": "migration/0", | |
"username": "root", | |
"ppid": 2, | |
"pgid": 0, | |
"memory": { | |
"size": 0, | |
"rss": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"share": 0 | |
}, | |
"fd": { | |
"open": 0, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
} | |
} | |
} | |
} | |
2018-06-19T11:10:09.610-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 139060 | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142909440, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"cwd": "/var/lib/gdm", | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 1674, | |
"cpu": { | |
"total": { | |
"value": 0, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"ppid": 1674, | |
"name": "gnome-shell", | |
"pid": 1714, | |
"state": "sleeping", | |
"username": "gdm", | |
"cmdline": "/usr/bin/gnome-shell" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:09.611-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 139202 | |
}, | |
"system": { | |
"process": { | |
"ppid": 1, | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"value": 0, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"username": "root", | |
"cwd": "/", | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 1168, | |
"pgid": 1168, | |
"memory": { | |
"share": 11227136, | |
"size": 1634631680, | |
"rss": { | |
"pct": 0.0062, | |
"bytes": 51044352 | |
} | |
}, | |
"name": "python" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:09.611-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"name": "metricbeat", | |
"state": "sleeping", | |
"ppid": 1, | |
"pgid": 6389, | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"cwd": "/", | |
"cpu": { | |
"start_time": "2018-06-14T16:41:30.000Z", | |
"total": { | |
"value": 0, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
} | |
}, | |
"pid": 6389, | |
"username": "root", | |
"memory": { | |
"size": 929284096, | |
"rss": { | |
"bytes": 32604160, | |
"pct": 0.004 | |
}, | |
"share": 14049280 | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 139324 | |
} | |
} | |
2018-06-19T11:10:09.611-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 139523, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"ppid": 1, | |
"name": "systemd-journal", | |
"state": "sleeping", | |
"username": "root", | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"cwd": "/", | |
"pid": 509, | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 24125440, | |
"pct": 0.0029 | |
}, | |
"share": 23728128 | |
}, | |
"cpu": { | |
"total": { | |
"value": 0, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"pgid": 509, | |
"fd": { | |
"open": 52, | |
"limit": { | |
"hard": 16384, | |
"soft": 16384 | |
} | |
} | |
} | |
} | |
} | |
2018-06-19T11:10:09.611-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:09.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 139694 | |
}, | |
"system": { | |
"process": { | |
"pid": 30597, | |
"memory": { | |
"size": 480337920, | |
"rss": { | |
"pct": 0.0027, | |
"bytes": 22437888 | |
}, | |
"share": 13262848 | |
}, | |
"cwd": "/root", | |
"name": "metricbeat", | |
"username": "root", | |
"pgid": 30597, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"cpu": { | |
"total": { | |
"value": 0, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-19T18:10:09.000Z" | |
}, | |
"fd": { | |
"open": 5, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 29516, | |
"state": "sleeping" | |
} | |
} | |
} | |
2018-06-19T11:10:10.472-0700 DEBUG [logstash] logstash/async.go:94 connect | |
2018-06-19T11:10:10.476-0700 DEBUG [logstash] logstash/async.go:142 27 events out of 27 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T11:10:19.472-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:19.472Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 269 | |
}, | |
"system": { | |
"cpu": { | |
"iowait": { | |
"pct": 0.003 | |
}, | |
"system": { | |
"pct": 0.022 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.0571 | |
}, | |
"user": { | |
"pct": 0.031 | |
}, | |
"idle": { | |
"pct": 3.9429 | |
}, | |
"cores": 4, | |
"irq": { | |
"pct": 0 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0.001 | |
} | |
} | |
} | |
} | |
2018-06-19T11:10:19.472-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:19.472Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 578 | |
}, | |
"system": { | |
"memory": { | |
"actual": { | |
"free": 7297015808, | |
"used": { | |
"pct": 0.1104, | |
"bytes": 905711616 | |
} | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1796595712, | |
"pct": 0.219 | |
}, | |
"free": 6406131712 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:19.474-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:19.474Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 115, | |
"name": "load" | |
}, | |
"system": { | |
"load": { | |
"15": 0.05, | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
}, | |
"cores": 4, | |
"1": 0, | |
"5": 0.01 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:19.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:19.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 258, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"packets": 34056240, | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8820097920 | |
}, | |
"out": { | |
"bytes": 1542747194, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13633661 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:19.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:19.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 271, | |
"name": "network", | |
"module": "system" | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"bytes": 6606118582, | |
"packets": 1710498, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"packets": 1710498, | |
"bytes": 6606118582, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"name": "lo" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:19.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:19.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 277 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
} | |
} | |
2018-06-19T11:10:19.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:19.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 715 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:19.569-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:19.520Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 49217, | |
"namespace": "system.process.summary", | |
"name": "process_summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"unknown": 0, | |
"total": 189, | |
"sleeping": 188, | |
"running": 1, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0 | |
} | |
} | |
} | |
} | |
2018-06-19T11:10:19.745-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T11:10:19.747-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:19.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 135045, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"ppid": 29516, | |
"name": "metricbeat", | |
"username": "root", | |
"memory": { | |
"size": 556920832, | |
"rss": { | |
"bytes": 23023616, | |
"pct": 0.0028 | |
}, | |
"share": 13459456 | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"pid": 30597, | |
"pgid": 30597, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 6 | |
}, | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"pct": 0.0227, | |
"norm": { | |
"pct": 0.0057 | |
}, | |
"value": 540 | |
}, | |
"start_time": "2018-06-19T18:10:09.000Z" | |
}, | |
"cwd": "/root" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:19.747-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:19.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 135084 | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 6389, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"state": "sleeping", | |
"memory": { | |
"rss": { | |
"bytes": 32604160, | |
"pct": 0.004 | |
}, | |
"share": 14049280, | |
"size": 929284096 | |
}, | |
"ppid": 1, | |
"username": "root", | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0049 | |
}, | |
"value": 7.06949e+06, | |
"pct": 0.0197 | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
}, | |
"pgid": 6389, | |
"name": "metricbeat" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:19.747-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:19.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 135091 | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 4, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"ppid": 1171, | |
"name": "xymond", | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"cwd": "/", | |
"username": "xymon", | |
"memory": { | |
"size": 51286016, | |
"rss": { | |
"bytes": 8130560, | |
"pct": 0.001 | |
}, | |
"share": 2699264 | |
}, | |
"pid": 1319, | |
"cpu": { | |
"total": { | |
"value": 692430, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"pgid": 1171, | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:19.747-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:19.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 135522, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"pid": 1168, | |
"ppid": 1, | |
"state": "sleeping", | |
"username": "root", | |
"cpu": { | |
"total": { | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
}, | |
"value": 1.27062e+06 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136 | |
}, | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"name": "python", | |
"pgid": 1168, | |
"cwd": "/" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:19.747-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:19.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 135762 | |
}, | |
"system": { | |
"process": { | |
"username": "root", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0002 | |
}, | |
"value": 4280, | |
"pct": 0.001 | |
}, | |
"start_time": "2018-06-12T23:28:51.000Z" | |
}, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 0 | |
}, | |
"pgid": 0, | |
"name": "ksoftirqd/3", | |
"ppid": 2, | |
"state": "sleeping", | |
"memory": { | |
"share": 0, | |
"size": 0, | |
"rss": { | |
"bytes": 0, | |
"pct": 0 | |
} | |
}, | |
"pid": 23 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:19.748-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:19.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 135779 | |
}, | |
"system": { | |
"process": { | |
"ppid": 1674, | |
"pgid": 1674, | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142909440, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"pid": 1714, | |
"name": "gnome-shell", | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"value": 201990, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"cmdline": "/usr/bin/gnome-shell", | |
"cwd": "/var/lib/gdm", | |
"username": "gdm", | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:19.748-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:19.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 136139 | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 24125440, | |
"pct": 0.0029 | |
}, | |
"share": 23728128 | |
}, | |
"cwd": "/", | |
"pid": 509, | |
"ppid": 1, | |
"pgid": 509, | |
"name": "systemd-journal", | |
"state": "sleeping", | |
"fd": { | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
}, | |
"open": 52 | |
}, | |
"username": "root", | |
"cpu": { | |
"total": { | |
"value": 45840, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"cmdline": "/usr/lib/systemd/systemd-journald" | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:10:20.477-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T11:10:29.472-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:29.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 236, | |
"name": "cpu" | |
}, | |
"system": { | |
"cpu": { | |
"cores": 4, | |
"total": { | |
"pct": 0.0621 | |
}, | |
"system": { | |
"pct": 0.0291 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0.002 | |
}, | |
"user": { | |
"pct": 0.0311 | |
}, | |
"idle": { | |
"pct": 3.9379 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"irq": { | |
"pct": 0 | |
} | |
} | |
} | |
} | |
2018-06-19T11:10:29.472-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:29.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"memory": { | |
"actual": { | |
"free": 7293399040, | |
"used": { | |
"pct": 0.1109, | |
"bytes": 909328384 | |
} | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1800232960, | |
"pct": 0.2195 | |
}, | |
"free": 6402494464 | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 329 | |
} | |
} | |
2018-06-19T11:10:29.474-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:29.474Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"load": { | |
"15": 0.05, | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
}, | |
"cores": 4, | |
"1": 0, | |
"5": 0.01 | |
} | |
}, | |
"metricset": { | |
"rtt": 107, | |
"name": "load", | |
"module": "system" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:29.475-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:29.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 178 | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"packets": 34057739, | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8820275554 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13634587, | |
"bytes": 1542838243 | |
}, | |
"name": "ens192" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:29.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:29.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 201 | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"dropped": 0, | |
"bytes": 6606188254, | |
"packets": 1710540, | |
"errors": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1710540, | |
"bytes": 6606188254 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:29.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:29.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 208 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:29.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:29.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 442, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:10:29.564-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:29.520Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 43943, | |
"namespace": "system.process.summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 191, | |
"sleeping": 191, | |
"running": 0, | |
"idle": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:29.727-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T11:10:29.729-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:29.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 117502, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"name": "metricbeat", | |
"memory": { | |
"size": 556920832, | |
"rss": { | |
"bytes": 24244224, | |
"pct": 0.003 | |
}, | |
"share": 13537280 | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"pgid": 30597, | |
"fd": { | |
"open": 6, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"pid": 30597, | |
"username": "root", | |
"cpu": { | |
"start_time": "2018-06-19T18:10:09.000Z", | |
"total": { | |
"value": 730, | |
"pct": 0.019, | |
"norm": { | |
"pct": 0.0048 | |
} | |
} | |
}, | |
"ppid": 29516, | |
"cwd": "/root" | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:10:29.729-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:29.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 117536 | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"memory": { | |
"size": 929284096, | |
"rss": { | |
"bytes": 32604160, | |
"pct": 0.004 | |
}, | |
"share": 14049280 | |
}, | |
"cpu": { | |
"total": { | |
"value": 7.06968e+06, | |
"pct": 0.019, | |
"norm": { | |
"pct": 0.0048 | |
} | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
}, | |
"ppid": 1, | |
"pgid": 6389, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"pid": 6389, | |
"cwd": "/", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 6 | |
}, | |
"name": "metricbeat", | |
"username": "root" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:29.729-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:29.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 117542 | |
}, | |
"system": { | |
"process": { | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"memory": { | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136, | |
"size": 1634631680 | |
}, | |
"ppid": 1, | |
"cpu": { | |
"total": { | |
"pct": 0.003, | |
"norm": { | |
"pct": 0.0008 | |
}, | |
"value": 1.27065e+06 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 1168, | |
"name": "python", | |
"state": "sleeping", | |
"pid": 1168, | |
"username": "root", | |
"cwd": "/" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:10:29.729-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:29.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 117888 | |
}, | |
"system": { | |
"process": { | |
"name": "httpd", | |
"username": "apache", | |
"cmdline": "/usr/sbin/httpd -DFOREGROUND", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0003 | |
}, | |
"value": 340, | |
"pct": 0.001 | |
}, | |
"start_time": "2018-06-18T10:23:01.000Z" | |
}, | |
"memory": { | |
"rss": { | |
"pct": 0.0005, | |
"bytes": 3952640 | |
}, | |
"share": 1937408, | |
"size": 229515264 | |
}, | |
"cwd": "/", | |
"pid": 23449, | |
"fd": { | |
"open": 8, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"ppid": 1180, | |
"state": "sleeping", | |
"pgid": 1180 | |
} | |
} | |
} | |
2018-06-19T11:10:29.729-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:29.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 118022, | |
"name": "process", | |
"module": "system" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 195588096, | |
"rss": { | |
"pct": 0.0005, | |
"bytes": 4194304 | |
}, | |
"share": 2605056 | |
}, | |
"cmdline": "/usr/lib/systemd/systemd --switched-root --system --deserialize 21", | |
"cpu": { | |
"start_time": "2018-06-12T23:28:51.000Z", | |
"total": { | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 188280, | |
"pct": 0 | |
} | |
}, | |
"pid": 1, | |
"state": "sleeping", | |
"username": "root", | |
"fd": { | |
"limit": { | |
"soft": 65536, | |
"hard": 65536 | |
}, | |
"open": 49 | |
}, | |
"cwd": "/", | |
"ppid": 0, | |
"pgid": 1, | |
"name": "systemd" | |
} | |
} | |
} | |
2018-06-19T11:10:29.730-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:29.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 118168 | |
}, | |
"system": { | |
"process": { | |
"pid": 1714, | |
"name": "gnome-shell", | |
"cwd": "/var/lib/gdm", | |
"ppid": 1674, | |
"username": "gdm", | |
"memory": { | |
"rss": { | |
"bytes": 142909440, | |
"pct": 0.0174 | |
}, | |
"share": 48148480, | |
"size": 2004910080 | |
}, | |
"fd": { | |
"open": 36, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"pgid": 1674, | |
"state": "sleeping", | |
"cmdline": "/usr/bin/gnome-shell", | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 201990 | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:10:29.730-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:29.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"fd": { | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
}, | |
"open": 52 | |
}, | |
"cpu": { | |
"total": { | |
"value": 45840, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"pid": 509, | |
"pgid": 509, | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 24125440, | |
"pct": 0.0029 | |
}, | |
"share": 23728128 | |
}, | |
"cwd": "/", | |
"ppid": 1, | |
"state": "sleeping", | |
"name": "systemd-journal", | |
"username": "root" | |
} | |
}, | |
"metricset": { | |
"rtt": 118377, | |
"name": "process", | |
"module": "system" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:30.473-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T11:10:39.468-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":340,"time":348},"total":{"ticks":750,"time":760,"value":750},"user":{"ticks":410,"time":412}},"info":{"ephemeral_id":"404e994c-080a-4dc6-878f-17e867a43652","uptime":{"ms":30069}},"memstats":{"gc_next":4753184,"memory_alloc":4210312,"memory_total":52002584,"rss":24244224}},"libbeat":{"config":{"module":{"running":3,"starts":3},"reloads":1},"output":{"events":{"acked":57,"batches":3,"total":57},"read":{"bytes":18},"type":"logstash","write":{"bytes":7316}},"pipeline":{"clients":6,"events":{"active":0,"filtered":26,"published":57,"retry":27,"total":83},"queue":{"acked":57}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"filesystem":{"events":33,"success":33},"fsstat":{"events":1,"success":1},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":24,"success":24},"process_summary":{"events":3,"success":3},"uptime":{"events":1,"success":1}}},"system":{"cpu":{"cores":4},"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-19T11:10:39.472-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:39.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 149, | |
"name": "cpu", | |
"module": "system" | |
}, | |
"system": { | |
"cpu": { | |
"iowait": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"cores": 4, | |
"total": { | |
"pct": 0.0491 | |
}, | |
"idle": { | |
"pct": 3.9509 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.027 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"system": { | |
"pct": 0.022 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:10:39.472-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:39.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 441 | |
}, | |
"system": { | |
"memory": { | |
"total": 8202727424, | |
"used": { | |
"bytes": 1798688768, | |
"pct": 0.2193 | |
}, | |
"free": 6404038656, | |
"actual": { | |
"free": 7294943232, | |
"used": { | |
"pct": 0.1107, | |
"bytes": 907784192 | |
} | |
}, | |
"swap": { | |
"free": 2147479552, | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:39.474-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:39.474Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 97 | |
}, | |
"system": { | |
"load": { | |
"1": 0, | |
"5": 0.01, | |
"15": 0.05, | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
}, | |
"cores": 4 | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:10:39.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:39.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 193 | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8820314264, | |
"packets": 34058270 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 13634743, | |
"bytes": 1542876645, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:39.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:39.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 222 | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6606261007, | |
"packets": 1710594 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 1710594, | |
"bytes": 6606261007, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:39.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:39.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 232 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:39.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:39.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 476 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:39.551-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:39.520Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 31167, | |
"namespace": "system.process.summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 190, | |
"sleeping": 190 | |
} | |
} | |
} | |
} | |
2018-06-19T11:10:39.702-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 8 processes | |
2018-06-19T11:10:39.704-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:39.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"ppid": 1, | |
"username": "root", | |
"state": "sleeping", | |
"pid": 6389, | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0045 | |
}, | |
"value": 7.06986e+06, | |
"pct": 0.018 | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
}, | |
"pgid": 6389, | |
"name": "metricbeat", | |
"memory": { | |
"size": 929284096, | |
"rss": { | |
"bytes": 32604160, | |
"pct": 0.004 | |
}, | |
"share": 14049280 | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 92684, | |
"name": "process" | |
} | |
} | |
2018-06-19T11:10:39.704-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:39.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 92714, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"name": "metricbeat", | |
"memory": { | |
"rss": { | |
"bytes": 24514560, | |
"pct": 0.003 | |
}, | |
"share": 13598720, | |
"size": 556920832 | |
}, | |
"cwd": "/root", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"value": 900, | |
"pct": 0.017, | |
"norm": { | |
"pct": 0.0043 | |
} | |
}, | |
"start_time": "2018-06-19T18:10:09.000Z" | |
}, | |
"pgid": 30597, | |
"ppid": 29516, | |
"username": "root", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"pid": 30597 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:39.704-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:39.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 92722 | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"value": 692450, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"fd": { | |
"open": 4, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 1319, | |
"pgid": 1171, | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"memory": { | |
"rss": { | |
"bytes": 8130560, | |
"pct": 0.001 | |
}, | |
"share": 2699264, | |
"size": 51286016 | |
}, | |
"name": "xymond", | |
"ppid": 1171, | |
"username": "xymon" | |
} | |
} | |
} | |
2018-06-19T11:10:39.705-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:39.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 93097, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"start_time": "2018-06-12T23:29:16.000Z", | |
"total": { | |
"norm": { | |
"pct": 0.0005 | |
}, | |
"value": 611980, | |
"pct": 0.002 | |
} | |
}, | |
"pgid": 747, | |
"ppid": 1, | |
"name": "vmtoolsd", | |
"state": "sleeping", | |
"username": "root", | |
"pid": 747, | |
"fd": { | |
"open": 8, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"memory": { | |
"size": 312348672, | |
"rss": { | |
"pct": 0.0008, | |
"bytes": 6344704 | |
}, | |
"share": 4878336 | |
}, | |
"cmdline": "/usr/bin/vmtoolsd", | |
"cwd": "/" | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:10:39.705-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:39.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 93216 | |
}, | |
"system": { | |
"process": { | |
"cwd": "/", | |
"pid": 428, | |
"memory": { | |
"size": 0, | |
"rss": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"share": 0 | |
}, | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0003 | |
}, | |
"value": 222290, | |
"pct": 0.001 | |
}, | |
"start_time": "2018-06-12T23:28:53.000Z" | |
}, | |
"fd": { | |
"open": 0, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 2, | |
"name": "xfsaild/dm-0", | |
"username": "root", | |
"pgid": 0, | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:39.705-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:39.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 93392 | |
}, | |
"system": { | |
"process": { | |
"cwd": "/var/lib/gdm", | |
"cpu": { | |
"start_time": "2018-06-12T23:29:50.000Z", | |
"total": { | |
"value": 201990, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
} | |
}, | |
"username": "gdm", | |
"name": "gnome-shell", | |
"memory": { | |
"share": 48148480, | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142909440, | |
"pct": 0.0174 | |
} | |
}, | |
"cmdline": "/usr/bin/gnome-shell", | |
"pgid": 1674, | |
"state": "sleeping", | |
"fd": { | |
"open": 36, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"pid": 1714, | |
"ppid": 1674 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:39.705-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:39.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 93529 | |
}, | |
"system": { | |
"process": { | |
"cwd": "/", | |
"fd": { | |
"open": 11, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"ppid": 1, | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0003 | |
}, | |
"value": 1.27066e+06, | |
"pct": 0.001 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"pid": 1168, | |
"name": "python", | |
"state": "sleeping", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"pgid": 1168, | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136 | |
}, | |
"username": "root" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:39.705-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:39.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 93661, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"pgid": 509, | |
"state": "sleeping", | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"ppid": 1, | |
"pid": 509, | |
"name": "systemd-journal", | |
"memory": { | |
"share": 23732224, | |
"size": 62988288, | |
"rss": { | |
"bytes": 24129536, | |
"pct": 0.0029 | |
} | |
}, | |
"cpu": { | |
"total": { | |
"value": 45840, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"username": "root", | |
"cwd": "/" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:40.475-0700 DEBUG [logstash] logstash/async.go:142 16 events out of 16 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T11:10:49.472-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:49.472Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 191 | |
}, | |
"system": { | |
"cpu": { | |
"steal": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.02 | |
}, | |
"system": { | |
"pct": 0.02 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0 | |
}, | |
"cores": 4, | |
"idle": { | |
"pct": 3.9599 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.0401 | |
}, | |
"nice": { | |
"pct": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:49.472-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:49.472Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 398 | |
}, | |
"system": { | |
"memory": { | |
"actual": { | |
"free": 7294783488, | |
"used": { | |
"pct": 0.1107, | |
"bytes": 907943936 | |
} | |
}, | |
"swap": { | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552, | |
"total": 2147479552 | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1798848512, | |
"pct": 0.2193 | |
}, | |
"free": 6403878912 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:49.474-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:49.474Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 194, | |
"name": "load" | |
}, | |
"system": { | |
"load": { | |
"5": 0.01, | |
"15": 0.05, | |
"norm": { | |
"5": 0.0025, | |
"15": 0.0125, | |
"1": 0 | |
}, | |
"cores": 4, | |
"1": 0 | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:10:49.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:49.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 246, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8820342714, | |
"packets": 34058538 | |
}, | |
"out": { | |
"bytes": 1542901730, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13634783 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:10:49.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:49.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 272, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"packets": 1710594, | |
"bytes": 6606261007, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"name": "lo", | |
"in": { | |
"dropped": 0, | |
"bytes": 6606261007, | |
"packets": 1710594, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:10:49.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:49.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 282 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
} | |
} | |
2018-06-19T11:10:49.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:49.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 564 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:49.563-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:49.520Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 42941, | |
"namespace": "system.process.summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"zombie": 0, | |
"unknown": 0, | |
"total": 190, | |
"sleeping": 190, | |
"running": 0, | |
"idle": 0, | |
"stopped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:49.713-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T11:10:49.715-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:49.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 103770 | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"memory": { | |
"size": 556920832, | |
"rss": { | |
"bytes": 24559616, | |
"pct": 0.003 | |
}, | |
"share": 13602816 | |
}, | |
"cwd": "/root", | |
"ppid": 29516, | |
"name": "metricbeat", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 30597, | |
"username": "root", | |
"cpu": { | |
"total": { | |
"pct": 0.019, | |
"norm": { | |
"pct": 0.0047 | |
}, | |
"value": 1090 | |
}, | |
"start_time": "2018-06-19T18:10:09.000Z" | |
}, | |
"pgid": 30597 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:49.716-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:49.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 103804, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"ppid": 1, | |
"state": "sleeping", | |
"memory": { | |
"size": 929284096, | |
"rss": { | |
"bytes": 32604160, | |
"pct": 0.004 | |
}, | |
"share": 14049280 | |
}, | |
"username": "root", | |
"cpu": { | |
"total": { | |
"value": 7.07005e+06, | |
"pct": 0.019, | |
"norm": { | |
"pct": 0.0047 | |
} | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 6 | |
}, | |
"pid": 6389, | |
"pgid": 6389, | |
"name": "metricbeat", | |
"cwd": "/" | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:10:49.716-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:49.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 103810, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"name": "python", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"cwd": "/", | |
"ppid": 1, | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 1168, | |
"state": "sleeping", | |
"pgid": 1168, | |
"cpu": { | |
"total": { | |
"value": 1.27069e+06, | |
"pct": 0.003, | |
"norm": { | |
"pct": 0.0007 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"username": "root", | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"pct": 0.0062, | |
"bytes": 51044352 | |
}, | |
"share": 11227136 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:49.716-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:49.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 104307, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 4, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"pgid": 1171, | |
"state": "sleeping", | |
"memory": { | |
"size": 51286016, | |
"rss": { | |
"bytes": 8130560, | |
"pct": 0.001 | |
}, | |
"share": 2699264 | |
}, | |
"ppid": 1171, | |
"name": "xymond", | |
"username": "xymon", | |
"cpu": { | |
"total": { | |
"value": 692470, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"cwd": "/", | |
"pid": 1319, | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:49.716-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:49.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 104598 | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 13, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"name": "sshd", | |
"username": "root", | |
"ppid": 1172, | |
"cmdline": "sshd: root@pts/1 ", | |
"memory": { | |
"share": 4997120, | |
"size": 158511104, | |
"rss": { | |
"pct": 0.0008, | |
"bytes": 6496256 | |
} | |
}, | |
"cwd": "/", | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"value": 160, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0002 | |
} | |
}, | |
"start_time": "2018-06-19T18:00:41.000Z" | |
}, | |
"pid": 29506, | |
"pgid": 29506 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:49.716-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:49.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 104607, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"total": { | |
"value": 201990, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"ppid": 1674, | |
"pgid": 1674, | |
"cmdline": "/usr/bin/gnome-shell", | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 1714, | |
"cwd": "/var/lib/gdm", | |
"name": "gnome-shell", | |
"username": "gdm", | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142909440, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:49.716-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:49.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 104918 | |
}, | |
"system": { | |
"process": { | |
"cwd": "/", | |
"pid": 509, | |
"ppid": 1, | |
"name": "systemd-journal", | |
"username": "root", | |
"pgid": 509, | |
"state": "sleeping", | |
"cpu": { | |
"start_time": "2018-06-12T23:29:04.000Z", | |
"total": { | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 45840, | |
"pct": 0 | |
} | |
}, | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 24129536, | |
"pct": 0.0029 | |
}, | |
"share": 23732224 | |
}, | |
"cmdline": "/usr/lib/systemd/systemd-journald" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:50.475-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T11:10:59.472-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:59.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 241, | |
"name": "cpu", | |
"module": "system" | |
}, | |
"system": { | |
"cpu": { | |
"steal": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.0291 | |
}, | |
"iowait": { | |
"pct": 0.003 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0.001 | |
}, | |
"total": { | |
"pct": 0.0661 | |
}, | |
"system": { | |
"pct": 0.0331 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"cores": 4, | |
"idle": { | |
"pct": 3.9339 | |
} | |
} | |
} | |
} | |
2018-06-19T11:10:59.472-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:59.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 338, | |
"name": "memory", | |
"module": "system" | |
}, | |
"system": { | |
"memory": { | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"free": 2147479552 | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1798594560, | |
"pct": 0.2193 | |
}, | |
"free": 6404132864, | |
"actual": { | |
"free": 7295041536, | |
"used": { | |
"pct": 0.1107, | |
"bytes": 907685888 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:59.474-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:59.474Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 135 | |
}, | |
"system": { | |
"load": { | |
"norm": { | |
"5": 0.0025, | |
"15": 0.0125, | |
"1": 0 | |
}, | |
"cores": 4, | |
"1": 0, | |
"5": 0.01, | |
"15": 0.05 | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:10:59.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:59.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"bytes": 8820721053, | |
"packets": 34058991, | |
"errors": 0, | |
"dropped": 1698 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13634974, | |
"bytes": 1542936280 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 220 | |
} | |
} | |
2018-06-19T11:10:59.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:59.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 231 | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6606612525, | |
"packets": 1710651 | |
}, | |
"out": { | |
"bytes": 6606612525, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1710651 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:10:59.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:59.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
}, | |
"metricset": { | |
"rtt": 237, | |
"name": "network", | |
"module": "system" | |
} | |
} | |
2018-06-19T11:10:59.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:59.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 579 | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0 | |
}, | |
"name": "virbr0", | |
"in": { | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:59.554-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:59.520Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 34082, | |
"namespace": "system.process.summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"zombie": 0, | |
"unknown": 0, | |
"total": 190, | |
"sleeping": 190, | |
"running": 0, | |
"idle": 0, | |
"stopped": 0 | |
} | |
} | |
} | |
} | |
2018-06-19T11:10:59.708-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T11:10:59.710-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:59.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 98883 | |
}, | |
"system": { | |
"process": { | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"pid": 6389, | |
"ppid": 1, | |
"state": "sleeping", | |
"username": "root", | |
"cpu": { | |
"total": { | |
"value": 7.07021e+06, | |
"pct": 0.016, | |
"norm": { | |
"pct": 0.004 | |
} | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
}, | |
"pgid": 6389, | |
"memory": { | |
"rss": { | |
"bytes": 32604160, | |
"pct": 0.004 | |
}, | |
"share": 14049280, | |
"size": 929284096 | |
}, | |
"cwd": "/", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"name": "metricbeat" | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:10:59.710-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:59.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 98917 | |
}, | |
"system": { | |
"process": { | |
"pgid": 30597, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"pid": 30597, | |
"username": "root", | |
"state": "sleeping", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 29516, | |
"name": "metricbeat", | |
"memory": { | |
"rss": { | |
"bytes": 24879104, | |
"pct": 0.003 | |
}, | |
"share": 13606912, | |
"size": 558006272 | |
}, | |
"cwd": "/root", | |
"cpu": { | |
"total": { | |
"value": 1240, | |
"pct": 0.015, | |
"norm": { | |
"pct": 0.0038 | |
} | |
}, | |
"start_time": "2018-06-19T18:10:09.000Z" | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:59.711-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:59.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 98924 | |
}, | |
"system": { | |
"process": { | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"value": 1.27072e+06, | |
"pct": 0.003, | |
"norm": { | |
"pct": 0.0008 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"ppid": 1, | |
"pgid": 1168, | |
"state": "sleeping", | |
"username": "root", | |
"memory": { | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136, | |
"size": 1634631680 | |
}, | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 1168, | |
"name": "python" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:10:59.711-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:59.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 99343 | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 0, | |
"rss": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"share": 0 | |
}, | |
"pid": 428, | |
"state": "sleeping", | |
"username": "root", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 0 | |
}, | |
"ppid": 2, | |
"pgid": 0, | |
"cpu": { | |
"total": { | |
"value": 222300, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
}, | |
"start_time": "2018-06-12T23:28:53.000Z" | |
}, | |
"name": "xfsaild/dm-0" | |
} | |
} | |
} | |
2018-06-19T11:10:59.711-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:59.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 0, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 21888, | |
"ppid": 2, | |
"name": "kworker/1:2", | |
"memory": { | |
"size": 0, | |
"rss": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"share": 0 | |
}, | |
"cpu": { | |
"total": { | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
}, | |
"value": 90 | |
}, | |
"start_time": "2018-06-19T16:50:01.000Z" | |
}, | |
"pgid": 0, | |
"state": "sleeping", | |
"username": "root" | |
} | |
}, | |
"metricset": { | |
"rtt": 99484, | |
"name": "process", | |
"module": "system" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:59.711-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:59.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 99648 | |
}, | |
"system": { | |
"process": { | |
"ppid": 1674, | |
"cpu": { | |
"total": { | |
"value": 201990, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"pid": 1714, | |
"state": "sleeping", | |
"username": "gdm", | |
"cwd": "/var/lib/gdm", | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142909440, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"cmdline": "/usr/bin/gnome-shell", | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 1674, | |
"name": "gnome-shell" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:10:59.711-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:10:59.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 99777, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"pid": 509, | |
"pgid": 509, | |
"username": "root", | |
"cwd": "/", | |
"ppid": 1, | |
"fd": { | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
}, | |
"open": 52 | |
}, | |
"state": "sleeping", | |
"memory": { | |
"share": 23736320, | |
"size": 62988288, | |
"rss": { | |
"bytes": 24133632, | |
"pct": 0.0029 | |
} | |
}, | |
"name": "systemd-journal", | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"cpu": { | |
"start_time": "2018-06-12T23:29:04.000Z", | |
"total": { | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 45840, | |
"pct": 0 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:00.474-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T11:11:09.468-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":570,"time":580},"total":{"ticks":1260,"time":1270,"value":1260},"user":{"ticks":690,"time":690}},"info":{"ephemeral_id":"404e994c-080a-4dc6-878f-17e867a43652","uptime":{"ms":60069}},"memstats":{"gc_next":4434752,"memory_alloc":3839536,"memory_total":96871320,"rss":634880}},"libbeat":{"config":{"module":{"running":3}},"output":{"events":{"acked":46,"batches":3,"total":46},"read":{"bytes":18},"write":{"bytes":6408}},"pipeline":{"clients":6,"events":{"active":0,"published":46,"total":46},"queue":{"acked":46}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":22,"success":22},"process_summary":{"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-19T11:11:09.472-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:09.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 169, | |
"name": "cpu" | |
}, | |
"system": { | |
"cpu": { | |
"irq": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.022 | |
}, | |
"system": { | |
"pct": 0.019 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"cores": 4, | |
"nice": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.0411 | |
}, | |
"idle": { | |
"pct": 3.9589 | |
}, | |
"iowait": { | |
"pct": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:09.472-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:09.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 372, | |
"name": "memory", | |
"module": "system" | |
}, | |
"system": { | |
"memory": { | |
"used": { | |
"bytes": 1799163904, | |
"pct": 0.2193 | |
}, | |
"free": 6403563520, | |
"actual": { | |
"free": 7294472192, | |
"used": { | |
"pct": 0.1107, | |
"bytes": 908255232 | |
} | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
}, | |
"total": 8202727424 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:09.474-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:09.474Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 110 | |
}, | |
"system": { | |
"load": { | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
}, | |
"cores": 4, | |
"1": 0, | |
"5": 0.01, | |
"15": 0.05 | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:11:09.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:09.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 219 | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"packets": 34059956, | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8820784334 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13635005, | |
"bytes": 1542960094 | |
}, | |
"name": "ens192" | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:11:09.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:09.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 244 | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"dropped": 0, | |
"bytes": 6606612525, | |
"packets": 1710651, | |
"errors": 0 | |
}, | |
"out": { | |
"packets": 1710651, | |
"bytes": 6606612525, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:09.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:09.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 252, | |
"name": "network" | |
} | |
} | |
2018-06-19T11:11:09.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:09.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 652 | |
}, | |
"system": { | |
"filesystem": { | |
"free": 12062756864, | |
"available": 12062756864, | |
"device_name": "rootfs", | |
"mount_point": "/", | |
"total": 18746441728, | |
"free_files": 18077681, | |
"used": { | |
"bytes": 6683684864, | |
"pct": 0.3565 | |
}, | |
"type": "rootfs", | |
"files": 18317312 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:09.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:09.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 515 | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0 | |
}, | |
"name": "virbr0" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:09.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:09.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"filesystem": { | |
"total": 4101361664, | |
"files": 1001309, | |
"type": "tmpfs", | |
"device_name": "tmpfs", | |
"mount_point": "/run", | |
"free": 4024893440, | |
"available": 4024893440, | |
"free_files": 1000756, | |
"used": { | |
"pct": 0.0186, | |
"bytes": 76468224 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 1008, | |
"name": "filesystem", | |
"module": "system" | |
} | |
} | |
2018-06-19T11:11:09.476-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: / total=18746441728, used=6683684864, free=12062756864 | |
2018-06-19T11:11:09.476-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys total=0, used=0, free=0 | |
2018-06-19T11:11:09.476-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc total=0, used=0, free=0 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev total=4084723712, used=0, free=4084723712 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/security total=0, used=0, free=0 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/shm total=4101361664, used=81920, free=4101279744 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/pts total=0, used=0, free=0 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run total=4101361664, used=76468224, free=4024893440 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup total=4101361664, used=0, free=4101361664 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/systemd total=0, used=0, free=0 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/pstore total=0, used=0, free=0 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/perf_event total=0, used=0, free=0 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/freezer total=0, used=0, free=0 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/memory total=0, used=0, free=0 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/pids total=0, used=0, free=0 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/cpu,cpuacct total=0, used=0, free=0 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/blkio total=0, used=0, free=0 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/net_cls,net_prio total=0, used=0, free=0 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/devices total=0, used=0, free=0 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/hugetlb total=0, used=0, free=0 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/cpuset total=0, used=0, free=0 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/config total=0, used=0, free=0 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: / total=18746441728, used=6683684864, free=12062756864 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/sys/fs/binfmt_misc total=0, used=0, free=0 | |
2018-06-19T11:11:09.477-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:09.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 1701 | |
}, | |
"system": { | |
"filesystem": { | |
"type": "xfs", | |
"available": 12062756864, | |
"total": 18746441728, | |
"files": 18317312, | |
"device_name": "/dev/mapper/rhel-root", | |
"free": 12062756864, | |
"mount_point": "/", | |
"free_files": 18077681, | |
"used": { | |
"pct": 0.3565, | |
"bytes": 6683684864 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/mqueue total=0, used=0, free=0 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/hugepages total=0, used=0, free=0 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/debug total=0, used=0, free=0 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/fs/nfsd total=0, used=0, free=0 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /boot total=520794112, used=281665536, free=239128576 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /var/lib/nfs/rpc_pipefs total=0, used=0, free=0 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/sys/fs/binfmt_misc total=0, used=0, free=0 | |
2018-06-19T11:11:09.477-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:09.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 1991 | |
}, | |
"system": { | |
"filesystem": { | |
"free": 239128576, | |
"used": { | |
"pct": 0.5408, | |
"bytes": 281665536 | |
}, | |
"device_name": "/dev/sda1", | |
"available": 239128576, | |
"type": "xfs", | |
"mount_point": "/boot", | |
"total": 520794112, | |
"files": 512000, | |
"free_files": 511656 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run/user/42 total=820273152, used=12288, free=820260864 | |
2018-06-19T11:11:09.477-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run/user/0 total=820273152, used=0, free=820273152 | |
2018-06-19T11:11:09.477-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:09.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"filesystem": { | |
"available": 0, | |
"files": 0, | |
"mount_point": "/var/lib/nfs/rpc_pipefs", | |
"free": 0, | |
"type": "rpc_pipefs", | |
"free_files": 0, | |
"used": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"total": 0, | |
"device_name": "sunrpc" | |
} | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 1999, | |
"name": "filesystem" | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:11:09.478-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:09.476Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "fsstat", | |
"module": "system", | |
"rtt": 1266 | |
}, | |
"system": { | |
"fsstat": { | |
"total_files": 24833104, | |
"total_size": { | |
"free": 30254678016, | |
"used": 7041912832, | |
"total": 37296590848 | |
}, | |
"count": 31 | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:11:09.478-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:09.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 2273, | |
"name": "filesystem", | |
"module": "system" | |
}, | |
"system": { | |
"filesystem": { | |
"files": 1001309, | |
"type": "tmpfs", | |
"mount_point": "/run/user/42", | |
"free_files": 1001300, | |
"device_name": "tmpfs", | |
"free": 820260864, | |
"total": 820273152, | |
"available": 820260864, | |
"used": { | |
"bytes": 12288, | |
"pct": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:09.478-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:09.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 2524, | |
"name": "filesystem", | |
"module": "system" | |
}, | |
"system": { | |
"filesystem": { | |
"available": 820273152, | |
"free_files": 1001308, | |
"device_name": "tmpfs", | |
"files": 1001309, | |
"type": "tmpfs", | |
"free": 820273152, | |
"mount_point": "/run/user/0", | |
"total": 820273152, | |
"used": { | |
"pct": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:11:09.558-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:09.520Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 37897, | |
"namespace": "system.process.summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"total": 190, | |
"sleeping": 190, | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:09.716-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T11:11:09.717-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:09.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 106050 | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 558006272, | |
"rss": { | |
"bytes": 24932352, | |
"pct": 0.003 | |
}, | |
"share": 13631488 | |
}, | |
"pid": 30597, | |
"username": "root", | |
"cpu": { | |
"start_time": "2018-06-19T18:10:09.000Z", | |
"total": { | |
"value": 1430, | |
"pct": 0.019, | |
"norm": { | |
"pct": 0.0047 | |
} | |
} | |
}, | |
"ppid": 29516, | |
"state": "sleeping", | |
"pgid": 30597, | |
"name": "metricbeat", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"cwd": "/root", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 6 | |
} | |
} | |
} | |
} | |
2018-06-19T11:11:09.718-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:09.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"cwd": "/", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 1, | |
"name": "metricbeat", | |
"memory": { | |
"size": 929284096, | |
"rss": { | |
"bytes": 32604160, | |
"pct": 0.004 | |
}, | |
"share": 14049280 | |
}, | |
"pid": 6389, | |
"pgid": 6389, | |
"username": "root", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0045 | |
}, | |
"value": 7.07039e+06, | |
"pct": 0.018 | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
} | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 106079 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:09.718-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:09.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 106086 | |
}, | |
"system": { | |
"process": { | |
"cwd": "/", | |
"pid": 1168, | |
"ppid": 1, | |
"cpu": { | |
"total": { | |
"value": 1.27074e+06, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"state": "sleeping", | |
"username": "root", | |
"pgid": 1168, | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136 | |
}, | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"name": "python", | |
"cmdline": "python /usr/bin/goferd --foreground" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:09.718-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:09.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 106498 | |
}, | |
"system": { | |
"process": { | |
"pgid": 747, | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0005 | |
}, | |
"value": 612010, | |
"pct": 0.002 | |
}, | |
"start_time": "2018-06-12T23:29:16.000Z" | |
}, | |
"cwd": "/", | |
"pid": 747, | |
"fd": { | |
"open": 8, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 1, | |
"name": "vmtoolsd", | |
"username": "root", | |
"memory": { | |
"size": 312348672, | |
"rss": { | |
"bytes": 6344704, | |
"pct": 0.0008 | |
}, | |
"share": 4878336 | |
}, | |
"cmdline": "/usr/bin/vmtoolsd" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:09.718-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:09.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"pid": 1, | |
"pgid": 1, | |
"state": "sleeping", | |
"cmdline": "/usr/lib/systemd/systemd --switched-root --system --deserialize 21", | |
"username": "root", | |
"memory": { | |
"size": 195588096, | |
"rss": { | |
"pct": 0.0005, | |
"bytes": 4194304 | |
}, | |
"share": 2605056 | |
}, | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0003 | |
}, | |
"value": 188290, | |
"pct": 0.001 | |
}, | |
"start_time": "2018-06-12T23:28:51.000Z" | |
}, | |
"fd": { | |
"open": 49, | |
"limit": { | |
"soft": 65536, | |
"hard": 65536 | |
} | |
}, | |
"ppid": 0, | |
"name": "systemd" | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 106512 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:09.718-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:09.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 106757, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"pct": 0.0174, | |
"bytes": 142909440 | |
}, | |
"share": 48148480 | |
}, | |
"name": "gnome-shell", | |
"cwd": "/var/lib/gdm", | |
"pgid": 1674, | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"value": 202000, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0002 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 36 | |
}, | |
"ppid": 1674, | |
"username": "gdm", | |
"cmdline": "/usr/bin/gnome-shell", | |
"pid": 1714 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:09.718-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:09.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 106770 | |
}, | |
"system": { | |
"process": { | |
"pgid": 509, | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 24133632, | |
"pct": 0.0029 | |
}, | |
"share": 23736320 | |
}, | |
"cpu": { | |
"total": { | |
"value": 45850, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"cwd": "/", | |
"fd": { | |
"open": 52, | |
"limit": { | |
"hard": 16384, | |
"soft": 16384 | |
} | |
}, | |
"name": "systemd-journal", | |
"username": "root", | |
"pid": 509, | |
"ppid": 1, | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:11:10.474-0700 DEBUG [logstash] logstash/async.go:142 23 events out of 23 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T11:11:19.472-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:19.472Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 249 | |
}, | |
"system": { | |
"cpu": { | |
"system": { | |
"pct": 0.021 | |
}, | |
"total": { | |
"pct": 0.0451 | |
}, | |
"cores": 4, | |
"idle": { | |
"pct": 3.9549 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.024 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:19.472-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:19.472Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 353, | |
"name": "memory" | |
}, | |
"system": { | |
"memory": { | |
"free": 6403211264, | |
"actual": { | |
"free": 7294119936, | |
"used": { | |
"pct": 0.1108, | |
"bytes": 908607488 | |
} | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"free": 2147479552 | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1799516160, | |
"pct": 0.2194 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:11:19.474-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:19.474Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 133 | |
}, | |
"system": { | |
"load": { | |
"cores": 4, | |
"1": 0, | |
"5": 0.01, | |
"15": 0.05, | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:19.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:19.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 202 | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8820827624, | |
"packets": 34060607 | |
}, | |
"out": { | |
"bytes": 1542994568, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13635041 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:19.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:19.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 225 | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6606612525, | |
"packets": 1710651 | |
}, | |
"out": { | |
"packets": 1710651, | |
"bytes": 6606612525, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"name": "lo" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:19.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:19.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 231, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:19.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:19.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 448, | |
"name": "network", | |
"module": "system" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:19.566-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:19.520Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 45686, | |
"namespace": "system.process.summary", | |
"name": "process_summary", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"unknown": 0, | |
"total": 190, | |
"sleeping": 190, | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:19.723-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T11:11:19.725-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:19.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 113299, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"pid": 30597, | |
"name": "metricbeat", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"username": "root", | |
"memory": { | |
"size": 558006272, | |
"rss": { | |
"bytes": 24952832, | |
"pct": 0.003 | |
}, | |
"share": 13643776 | |
}, | |
"cpu": { | |
"total": { | |
"value": 1630, | |
"pct": 0.02, | |
"norm": { | |
"pct": 0.005 | |
} | |
}, | |
"start_time": "2018-06-19T18:10:09.000Z" | |
}, | |
"pgid": 30597, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 6 | |
}, | |
"ppid": 29516, | |
"state": "sleeping", | |
"cwd": "/root" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:19.725-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:19.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"username": "root", | |
"memory": { | |
"size": 929284096, | |
"rss": { | |
"bytes": 32604160, | |
"pct": 0.004 | |
}, | |
"share": 14049280 | |
}, | |
"name": "metricbeat", | |
"cpu": { | |
"total": { | |
"value": 7.07056e+06, | |
"pct": 0.017, | |
"norm": { | |
"pct": 0.0042 | |
} | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
}, | |
"ppid": 1, | |
"fd": { | |
"open": 6, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"pid": 6389, | |
"pgid": 6389, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"cwd": "/" | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 113336 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:19.725-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:19.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 113346 | |
}, | |
"system": { | |
"process": { | |
"pid": 1319, | |
"state": "sleeping", | |
"memory": { | |
"rss": { | |
"bytes": 8130560, | |
"pct": 0.001 | |
}, | |
"share": 2699264, | |
"size": 51286016 | |
}, | |
"username": "xymon", | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"value": 692500, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"fd": { | |
"open": 4, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"pgid": 1171, | |
"name": "xymond", | |
"ppid": 1171, | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:19.725-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:19.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 113775, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"name": "python", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"cwd": "/", | |
"username": "root", | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136 | |
}, | |
"ppid": 1, | |
"pgid": 1168, | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
}, | |
"value": 1.27076e+06 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"pid": 1168 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:19.725-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:19.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 113793, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"pid": 745, | |
"username": "root", | |
"memory": { | |
"size": 24829952, | |
"rss": { | |
"pct": 0.0002, | |
"bytes": 1785856 | |
}, | |
"share": 1437696 | |
}, | |
"state": "sleeping", | |
"cmdline": "/usr/lib/systemd/systemd-logind", | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0002 | |
}, | |
"value": 12910 | |
}, | |
"start_time": "2018-06-12T23:29:16.000Z" | |
}, | |
"ppid": 1, | |
"fd": { | |
"open": 23, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"name": "systemd-logind", | |
"pgid": 745 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:19.726-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:19.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"total": { | |
"value": 202000, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"ppid": 1674, | |
"state": "sleeping", | |
"username": "gdm", | |
"pgid": 1674, | |
"name": "gnome-shell", | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142909440, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"cmdline": "/usr/bin/gnome-shell", | |
"pid": 1714, | |
"cwd": "/var/lib/gdm" | |
} | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 114095, | |
"name": "process" | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:11:19.726-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:19.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 114108 | |
}, | |
"system": { | |
"process": { | |
"pid": 509, | |
"cpu": { | |
"total": { | |
"value": 45850, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"name": "systemd-journal", | |
"username": "root", | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 24133632, | |
"pct": 0.0029 | |
}, | |
"share": 23736320 | |
}, | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"cwd": "/", | |
"state": "sleeping", | |
"ppid": 1, | |
"pgid": 509, | |
"fd": { | |
"open": 52, | |
"limit": { | |
"hard": 16384, | |
"soft": 16384 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:20.475-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T11:11:29.472-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:29.472Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 282 | |
}, | |
"system": { | |
"cpu": { | |
"softirq": { | |
"pct": 0.001 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.0271 | |
}, | |
"total": { | |
"pct": 0.0531 | |
}, | |
"cores": 4, | |
"idle": { | |
"pct": 3.9469 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"system": { | |
"pct": 0.0251 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"nice": { | |
"pct": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:29.472-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:29.472Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"memory": { | |
"total": 8202727424, | |
"used": { | |
"bytes": 1801900032, | |
"pct": 0.2197 | |
}, | |
"free": 6400827392, | |
"actual": { | |
"free": 7291752448, | |
"used": { | |
"pct": 0.1111, | |
"bytes": 910974976 | |
} | |
}, | |
"swap": { | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552, | |
"total": 2147479552 | |
} | |
} | |
}, | |
"metricset": { | |
"rtt": 374, | |
"name": "memory", | |
"module": "system" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:29.474-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:29.474Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 151 | |
}, | |
"system": { | |
"load": { | |
"15": 0.05, | |
"norm": { | |
"5": 0.0025, | |
"15": 0.0125, | |
"1": 0 | |
}, | |
"cores": 4, | |
"1": 0, | |
"5": 0.01 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:29.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:29.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 195 | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8820971000, | |
"packets": 34061536 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 13635942, | |
"bytes": 1543083626, | |
"errors": 0 | |
}, | |
"name": "ens192" | |
} | |
} | |
} | |
2018-06-19T11:11:29.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:29.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 238, | |
"name": "network", | |
"module": "system" | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6606682197, | |
"packets": 1710693 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1710693, | |
"bytes": 6606682197 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:11:29.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:29.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 246, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0 | |
}, | |
"out": { | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:29.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:29.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 510 | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"name": "virbr0" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:29.567-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:29.520Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"namespace": "system.process.summary", | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 47183 | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"sleeping": 192, | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 192 | |
} | |
} | |
} | |
} | |
2018-06-19T11:11:29.725-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T11:11:29.728-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:29.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 116101 | |
}, | |
"system": { | |
"process": { | |
"cwd": "/root", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 6 | |
}, | |
"ppid": 29516, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"cpu": { | |
"total": { | |
"pct": 0.02, | |
"norm": { | |
"pct": 0.005 | |
}, | |
"value": 1830 | |
}, | |
"start_time": "2018-06-19T18:10:09.000Z" | |
}, | |
"pid": 30597, | |
"pgid": 30597, | |
"state": "sleeping", | |
"name": "metricbeat", | |
"username": "root", | |
"memory": { | |
"size": 558006272, | |
"rss": { | |
"bytes": 24985600, | |
"pct": 0.003 | |
}, | |
"share": 13664256 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:29.728-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:29.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"pct": 0.016, | |
"norm": { | |
"pct": 0.004 | |
}, | |
"value": 7.07072e+06 | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
}, | |
"pid": 6389, | |
"ppid": 1, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"pgid": 6389, | |
"username": "root", | |
"name": "metricbeat", | |
"memory": { | |
"size": 929284096, | |
"rss": { | |
"bytes": 32604160, | |
"pct": 0.004 | |
}, | |
"share": 14049280 | |
}, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 6 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 116153 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:29.728-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:29.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 116164 | |
}, | |
"system": { | |
"process": { | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"cwd": "/", | |
"ppid": 1, | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136 | |
}, | |
"username": "root", | |
"cpu": { | |
"total": { | |
"value": 1.27079e+06, | |
"pct": 0.003, | |
"norm": { | |
"pct": 0.0008 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 1168, | |
"name": "python", | |
"pid": 1168, | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:29.728-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:29.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 116737, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"ppid": 2, | |
"pgid": 0, | |
"name": "xfsaild/dm-0", | |
"state": "sleeping", | |
"memory": { | |
"share": 0, | |
"size": 0, | |
"rss": { | |
"pct": 0, | |
"bytes": 0 | |
} | |
}, | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0003 | |
}, | |
"value": 222310, | |
"pct": 0.001 | |
}, | |
"start_time": "2018-06-12T23:28:53.000Z" | |
}, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 0 | |
}, | |
"pid": 428, | |
"username": "root" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:29.729-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:29.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 116936 | |
}, | |
"system": { | |
"process": { | |
"name": "xymond", | |
"state": "sleeping", | |
"cpu": { | |
"start_time": "2018-06-12T23:29:34.000Z", | |
"total": { | |
"value": 692510, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
} | |
}, | |
"ppid": 1171, | |
"pgid": 1171, | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"cwd": "/", | |
"memory": { | |
"size": 51286016, | |
"rss": { | |
"bytes": 8130560, | |
"pct": 0.001 | |
}, | |
"share": 2699264 | |
}, | |
"username": "xymon", | |
"fd": { | |
"open": 4, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 1319 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:29.729-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:29.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 117152, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"username": "gdm", | |
"cmdline": "/usr/bin/gnome-shell", | |
"state": "sleeping", | |
"cwd": "/var/lib/gdm", | |
"cpu": { | |
"total": { | |
"value": 202000, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"pid": 1714, | |
"pgid": 1674, | |
"name": "gnome-shell", | |
"ppid": 1674, | |
"memory": { | |
"share": 48148480, | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142909440, | |
"pct": 0.0174 | |
} | |
}, | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
} | |
} | |
} | |
} | |
2018-06-19T11:11:29.729-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:29.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 117387 | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"limit": { | |
"hard": 16384, | |
"soft": 16384 | |
}, | |
"open": 52 | |
}, | |
"cwd": "/", | |
"pid": 509, | |
"pgid": 509, | |
"name": "systemd-journal", | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"pct": 0.0029, | |
"bytes": 24133632 | |
}, | |
"share": 23736320 | |
}, | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"ppid": 1, | |
"state": "sleeping", | |
"username": "root", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 45850, | |
"pct": 0 | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:11:30.475-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T11:11:39.468-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":840,"time":841},"total":{"ticks":1850,"time":1856,"value":1850},"user":{"ticks":1010,"time":1015}},"info":{"ephemeral_id":"404e994c-080a-4dc6-878f-17e867a43652","uptime":{"ms":90071}},"memstats":{"gc_next":7298896,"memory_alloc":3671512,"memory_total":142068592,"rss":106496}},"libbeat":{"config":{"module":{"running":3}},"output":{"events":{"acked":53,"batches":3,"total":53},"read":{"bytes":18},"write":{"bytes":7119}},"pipeline":{"clients":6,"events":{"active":0,"filtered":26,"published":53,"total":79},"queue":{"acked":53}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"filesystem":{"events":33,"success":33},"fsstat":{"events":1,"success":1},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":21,"success":21},"process_summary":{"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-19T11:11:39.472-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:39.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 133, | |
"name": "cpu" | |
}, | |
"system": { | |
"cpu": { | |
"iowait": { | |
"pct": 0.004 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.0271 | |
}, | |
"idle": { | |
"pct": 3.9439 | |
}, | |
"softirq": { | |
"pct": 0 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.0561 | |
}, | |
"cores": 4, | |
"system": { | |
"pct": 0.0251 | |
} | |
} | |
} | |
} | |
2018-06-19T11:11:39.472-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:39.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 295 | |
}, | |
"system": { | |
"memory": { | |
"swap": { | |
"free": 2147479552, | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
} | |
}, | |
"total": 8202727424, | |
"used": { | |
"pct": 0.2194, | |
"bytes": 1799786496 | |
}, | |
"free": 6402940928, | |
"actual": { | |
"free": 7293870080, | |
"used": { | |
"pct": 0.1108, | |
"bytes": 908857344 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:39.474-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:39.474Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 105, | |
"name": "load" | |
}, | |
"system": { | |
"load": { | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
}, | |
"cores": 4, | |
"1": 0, | |
"5": 0.01, | |
"15": 0.05 | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:11:39.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:39.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"bytes": 8821013477, | |
"packets": 34062094, | |
"errors": 0, | |
"dropped": 1698 | |
}, | |
"out": { | |
"bytes": 1543122600, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13636119 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 188 | |
} | |
} | |
2018-06-19T11:11:39.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:39.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 221, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6606741078, | |
"packets": 1710737 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 1710737, | |
"bytes": 6606741078, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:39.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:39.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0 | |
} | |
} | |
}, | |
"metricset": { | |
"rtt": 231, | |
"name": "network", | |
"module": "system" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:39.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:39.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 532, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0 | |
}, | |
"out": { | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0 | |
} | |
} | |
} | |
} | |
2018-06-19T11:11:39.561-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:39.520Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"namespace": "system.process.summary", | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 41166 | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"total": 190, | |
"sleeping": 190, | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:39.741-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T11:11:39.743-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:39.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"ppid": 29516, | |
"state": "sleeping", | |
"username": "root", | |
"name": "metricbeat", | |
"cpu": { | |
"total": { | |
"value": 2040, | |
"pct": 0.021, | |
"norm": { | |
"pct": 0.0052 | |
} | |
}, | |
"start_time": "2018-06-19T18:10:09.000Z" | |
}, | |
"fd": { | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
}, | |
"open": 6 | |
}, | |
"pgid": 30597, | |
"memory": { | |
"share": 13799424, | |
"size": 633507840, | |
"rss": { | |
"bytes": 25210880, | |
"pct": 0.0031 | |
} | |
}, | |
"cwd": "/root", | |
"pid": 30597, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 131245 | |
} | |
} | |
2018-06-19T11:11:39.743-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:39.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 131287 | |
}, | |
"system": { | |
"process": { | |
"name": "metricbeat", | |
"cwd": "/", | |
"state": "sleeping", | |
"username": "root", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"pid": 6389, | |
"cpu": { | |
"total": { | |
"value": 7.07091e+06, | |
"pct": 0.019, | |
"norm": { | |
"pct": 0.0047 | |
} | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
}, | |
"ppid": 1, | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 6389, | |
"memory": { | |
"size": 929284096, | |
"rss": { | |
"bytes": 32604160, | |
"pct": 0.004 | |
}, | |
"share": 14049280 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:39.744-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:39.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"pgid": 1168, | |
"ppid": 1, | |
"username": "root", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 1168, | |
"name": "python", | |
"memory": { | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136, | |
"size": 1634631680 | |
}, | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0005 | |
}, | |
"value": 1.27081e+06, | |
"pct": 0.002 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
} | |
} | |
}, | |
"metricset": { | |
"rtt": 131293, | |
"name": "process", | |
"module": "system" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:39.744-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:39.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"pgid": 1171, | |
"name": "xymond", | |
"username": "xymon", | |
"memory": { | |
"share": 2699264, | |
"size": 51286016, | |
"rss": { | |
"pct": 0.001, | |
"bytes": 8130560 | |
} | |
}, | |
"fd": { | |
"open": 4, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"cwd": "/", | |
"pid": 1319, | |
"ppid": 1171, | |
"cpu": { | |
"total": { | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
}, | |
"value": 692530 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 132338, | |
"name": "process", | |
"module": "system" | |
} | |
} | |
2018-06-19T11:11:39.745-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:39.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 132361 | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"start_time": "2018-06-12T23:29:16.000Z", | |
"total": { | |
"norm": { | |
"pct": 0.0005 | |
}, | |
"value": 612050, | |
"pct": 0.002 | |
} | |
}, | |
"state": "sleeping", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 8 | |
}, | |
"pid": 747, | |
"ppid": 1, | |
"name": "vmtoolsd", | |
"pgid": 747, | |
"memory": { | |
"size": 312348672, | |
"rss": { | |
"bytes": 6344704, | |
"pct": 0.0008 | |
}, | |
"share": 4878336 | |
}, | |
"cmdline": "/usr/bin/vmtoolsd", | |
"username": "root", | |
"cwd": "/" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:11:39.745-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:39.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 132856 | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"pct": 0.0174, | |
"bytes": 142909440 | |
}, | |
"share": 48148480 | |
}, | |
"pid": 1714, | |
"pgid": 1674, | |
"username": "gdm", | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 1674, | |
"name": "gnome-shell", | |
"cwd": "/var/lib/gdm", | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 202000 | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"cmdline": "/usr/bin/gnome-shell", | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:11:39.745-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:39.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 133351 | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"cwd": "/", | |
"memory": { | |
"share": 23736320, | |
"size": 62988288, | |
"rss": { | |
"bytes": 24133632, | |
"pct": 0.0029 | |
} | |
}, | |
"name": "systemd-journal", | |
"username": "root", | |
"pgid": 509, | |
"cpu": { | |
"start_time": "2018-06-12T23:29:04.000Z", | |
"total": { | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 45850, | |
"pct": 0 | |
} | |
}, | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"pid": 509, | |
"ppid": 1, | |
"cmdline": "/usr/lib/systemd/systemd-journald" | |
} | |
} | |
} | |
2018-06-19T11:11:40.474-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T11:11:49.472-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:49.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 229 | |
}, | |
"system": { | |
"cpu": { | |
"steal": { | |
"pct": 0 | |
}, | |
"cores": 4, | |
"system": { | |
"pct": 0.022 | |
}, | |
"total": { | |
"pct": 0.0491 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.025 | |
}, | |
"iowait": { | |
"pct": 0.001 | |
}, | |
"idle": { | |
"pct": 3.9509 | |
}, | |
"softirq": { | |
"pct": 0.001 | |
}, | |
"nice": { | |
"pct": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:49.473-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:49.471Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 425 | |
}, | |
"system": { | |
"memory": { | |
"actual": { | |
"free": 7293968384, | |
"used": { | |
"pct": 0.1108, | |
"bytes": 908759040 | |
} | |
}, | |
"swap": { | |
"free": 2147479552, | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
} | |
}, | |
"total": 8202727424, | |
"used": { | |
"pct": 0.2194, | |
"bytes": 1799692288 | |
}, | |
"free": 6403035136 | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:11:49.474-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:49.474Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 138, | |
"name": "load", | |
"module": "system" | |
}, | |
"system": { | |
"load": { | |
"5": 0.01, | |
"15": 0.05, | |
"norm": { | |
"5": 0.0025, | |
"15": 0.0125, | |
"1": 0 | |
}, | |
"cores": 4, | |
"1": 0 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:49.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:49.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 240, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13636252, | |
"bytes": 1543152739 | |
}, | |
"name": "ens192", | |
"in": { | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8821326457, | |
"packets": 34063130 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:49.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:49.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6606948543, | |
"packets": 1710767 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1710767, | |
"bytes": 6606948543 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 265 | |
} | |
} | |
2018-06-19T11:11:49.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:49.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 271 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:49.476-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:49.475Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 549 | |
} | |
} | |
2018-06-19T11:11:49.567-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:49.520Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 46539, | |
"namespace": "system.process.summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"sleeping": 190, | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 190 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:11:49.733-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T11:11:49.735-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:49.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"name": "metricbeat", | |
"cwd": "/root", | |
"ppid": 29516, | |
"state": "sleeping", | |
"memory": { | |
"rss": { | |
"bytes": 25247744, | |
"pct": 0.0031 | |
}, | |
"share": 13807616, | |
"size": 633507840 | |
}, | |
"pgid": 30597, | |
"username": "root", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat -e -d *", | |
"cpu": { | |
"total": { | |
"pct": 0.021, | |
"norm": { | |
"pct": 0.0053 | |
}, | |
"value": 2250 | |
}, | |
"start_time": "2018-06-19T18:10:09.000Z" | |
}, | |
"pid": 30597, | |
"fd": { | |
"open": 6, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
} | |
} | |
}, | |
"metricset": { | |
"rtt": 123550, | |
"name": "process", | |
"module": "system" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:49.735-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:49.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 123604, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 929284096, | |
"rss": { | |
"bytes": 32604160, | |
"pct": 0.004 | |
}, | |
"share": 14049280 | |
}, | |
"cpu": { | |
"total": { | |
"value": 7.07111e+06, | |
"pct": 0.02, | |
"norm": { | |
"pct": 0.005 | |
} | |
}, | |
"start_time": "2018-06-14T16:41:30.000Z" | |
}, | |
"state": "sleeping", | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 6389, | |
"pgid": 6389, | |
"name": "metricbeat", | |
"username": "root", | |
"ppid": 1, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"cwd": "/" | |
} | |
} | |
} | |
2018-06-19T11:11:49.736-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:49.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 123614 | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 1168, | |
"state": "sleeping", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"cwd": "/", | |
"ppid": 1, | |
"name": "python", | |
"cpu": { | |
"total": { | |
"value": 1.27083e+06, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"memory": { | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136, | |
"size": 1634631680 | |
}, | |
"pgid": 1168, | |
"username": "root" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:49.736-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:49.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 124170 | |
}, | |
"system": { | |
"process": { | |
"pid": 1, | |
"ppid": 0, | |
"pgid": 1, | |
"username": "root", | |
"memory": { | |
"size": 195588096, | |
"rss": { | |
"bytes": 4194304, | |
"pct": 0.0005 | |
}, | |
"share": 2605056 | |
}, | |
"cwd": "/", | |
"cmdline": "/usr/lib/systemd/systemd --switched-root --system --deserialize 21", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0003 | |
}, | |
"value": 188300, | |
"pct": 0.001 | |
}, | |
"start_time": "2018-06-12T23:28:51.000Z" | |
}, | |
"name": "systemd", | |
"state": "sleeping", | |
"fd": { | |
"open": 49, | |
"limit": { | |
"hard": 65536, | |
"soft": 65536 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:11:49.736-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:49.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 124356 | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 4, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 1171, | |
"name": "xymond_rrd", | |
"cmdline": "xymond_rrd --rrddir=/var/lib/xymon/rrd", | |
"ppid": 1553, | |
"state": "sleeping", | |
"cwd": "/", | |
"pid": 1743, | |
"username": "xymon", | |
"memory": { | |
"size": 150126592, | |
"rss": { | |
"bytes": 6537216, | |
"pct": 0.0008 | |
}, | |
"share": 3592192 | |
}, | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0003 | |
}, | |
"value": 127680, | |
"pct": 0.001 | |
}, | |
"start_time": "2018-06-12T23:29:55.000Z" | |
} | |
} | |
} | |
} | |
2018-06-19T11:11:49.736-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:49.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 124627 | |
}, | |
"system": { | |
"process": { | |
"username": "gdm", | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 1674, | |
"pgid": 1674, | |
"cwd": "/var/lib/gdm", | |
"name": "gnome-shell", | |
"cpu": { | |
"total": { | |
"value": 202000, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"pid": 1714, | |
"state": "sleeping", | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142909440, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"cmdline": "/usr/bin/gnome-shell" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:49.736-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:11:49.611Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 124638 | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"memory": { | |
"share": 23736320, | |
"size": 62988288, | |
"rss": { | |
"bytes": 24133632, | |
"pct": 0.0029 | |
} | |
}, | |
"pid": 509, | |
"username": "root", | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"cpu": { | |
"total": { | |
"value": 45850, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"cwd": "/", | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"ppid": 1, | |
"pgid": 509, | |
"name": "systemd-journal" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:11:50.475-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
^C2018-06-19T11:11:51.136-0700 DEBUG [service] service/service.go:33 Received sigterm/sigint, stopping | |
2018-06-19T11:11:51.136-0700 INFO cfgfile/reload.go:222 Dynamic config reloader stopped | |
2018-06-19T11:11:51.136-0700 INFO instance/beat.go:308 metricbeat stopped. | |
2018-06-19T11:11:51.138-0700 INFO [monitoring] log/log.go:132 Total non-zero metrics {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":1020,"time":1028},"total":{"ticks":2270,"time":2278,"value":2270},"user":{"ticks":1250,"time":1250}},"info":{"ephemeral_id":"404e994c-080a-4dc6-878f-17e867a43652","uptime":{"ms":101739}},"memstats":{"gc_next":4638208,"memory_alloc":3684632,"memory_total":171891160,"rss":25247744}},"libbeat":{"config":{"module":{"running":3,"starts":3},"reloads":1},"output":{"events":{"acked":186,"batches":11,"total":186},"read":{"bytes":66},"type":"logstash","write":{"bytes":24978}},"pipeline":{"clients":6,"events":{"active":0,"filtered":52,"published":186,"retry":27,"total":238},"queue":{"acked":186}}},"metricbeat":{"system":{"cpu":{"events":11,"success":11},"filesystem":{"events":66,"success":66},"fsstat":{"events":2,"success":2},"load":{"events":11,"success":11},"memory":{"events":11,"success":11},"network":{"events":44,"success":44},"process":{"events":81,"success":81},"process_summary":{"events":11,"success":11},"uptime":{"events":1,"success":1}}},"system":{"cpu":{"cores":4},"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-19T11:11:51.139-0700 INFO [monitoring] log/log.go:133 Uptime: 1m41.741805755s | |
2018-06-19T11:11:51.139-0700 INFO [monitoring] log/log.go:110 Stopping metrics logging. | |
]0;root@lin-play-02:~lin-play-02>root>>/root>>service metricbeat stop | |
Stopping metricbeat (via systemctl): [60G[[0;32m OK [0;39m] | |
]0;root@lin-play-02:~lin-play-02>root>>/root>>cd /etc/metricbeat/ | |
]0;root@lin-play-02:/etc/metricbeatlin-play-02>root>>/etc/metricbeat>>vi metricbeat.yml | |
[?1049h[?1h=[1;38r[?12;25h[?12l[?25h[27m[m[H[2J[?25l[38;1H"metricbeat.yml" 136L, 5220C[1;1H###################### Metricbeat Configuration Example ####################### | |
# This file is an example configuration file highlighting only the most common | |
# options. The metricbeat.reference.yml file from the same directory contains all the | |
# supported options with more comments. You can use it as a reference. | |
# | |
# You can find the full configuration reference here: | |
# https://www.elastic.co/guide/en/beats/metricbeat/index.html | |
#========================== Modules configuration ============================ | |
metricbeat.config.modules: | |
# Glob pattern for configuration loading | |
path: ${path.config}/modules.d/*.yml | |
# Set to true to enable config reloading | |
reload.enabled: false | |
# Period on which files under path should be checked for changes | |
#reload.period: 10s | |
#==================== Elasticsearch template setting ========================== | |
setup.template.settings: | |
index.number_of_shards: 1 | |
index.codec: best_compression | |
#_source.enabled: false | |
#================================ General ===================================== | |
# The name of the shipper that publishes the network data. It can be used to group | |
# all the transactions sent by a single shipper in the web interface. | |
#name: | |
# The tags of the shipper are included in their own field with each | |
# transaction published. | |
#tags: ["service-X", "web-tier"][1;1H[?12l[?25h[?25l[38;1H[K[38;1H/[?12l[?25hdebug | |
[?25l[27m[m[H[2J[1;1Houtput.logstash: | |
# The Logstash hosts | |
#hosts: ["localhost:5044"] | |
hosts: ["162.70.27.206:15043"] | |
# Optional SSL. By default is off. | |
# List of root certificates for HTTPS server verifications | |
#ssl.certificate_authorities: ["/etc/pki/root/ca.pem"] | |
# Certificate for SSL client authentication | |
#ssl.certificate: "/etc/pki/client/cert.pem" | |
# Client Certificate Key | |
#ssl.key: "/etc/pki/client/cert.key" | |
#================================ Logging ===================================== | |
# Sets log level. The default log level is info. | |
# Available log levels are: error, warning, info, debug | |
#logging.level: debug | |
# At debug level, you can selectively enable logging only for some components. | |
# To enable all selectors use ["*"]. Examples of other selectors are "beat", | |
# "publish", "service". | |
#logging.selectors: ["*"] | |
#============================== Xpack Monitoring =============================== | |
# metricbeat can export internal metrics to a central Elasticsearch monitoring | |
# cluster. This requires xpack monitoring to be enabled in Elasticsearch. The | |
# reporting is disabled by default. | |
# Set to true to enable the monitoring reporter. | |
#xpack.monitoring.enabled: false | |
# Uncomment to send the metrics to Elasticsearch. Most settings from the | |
# Elasticsearch output are accepted here as well. Any setting that is not set is | |
# automatically inherited from the Elasticsearch output configuration, so if you[19;51H[?12l[?25h[20;21H | |
[?25llogging.level: debug[20;21H[K[20;1H[?12l[?25h[19;1H[18;1H[?25l[38;1H/[?12l[?25hlogging.to | |
[?25l[31msearch hit BOTTOM, continuing at TOP[m | |
[1m[37m[41mE486: Pattern not found: logging.to[m[38;36H[K[18;1H[?12l[?25h[?25l[27m[m[H[2J[1;1H###################### Metricbeat Configuration Example ####################### | |
# This file is an example configuration file highlighting only the most common | |
# options. The metricbeat.reference.yml file from the same directory contains all the | |
# supported options with more comments. You can use it as a reference. | |
# | |
# You can find the full configuration reference here: | |
# https://www.elastic.co/guide/en/beats/metricbeat/index.html | |
#========================== Modules configuration ============================ | |
metricbeat.config.modules: | |
# Glob pattern for configuration loading | |
path: ${path.config}/modules.d/*.yml | |
# Set to true to enable config reloading | |
reload.enabled: false | |
# Period on which files under path should be checked for changes | |
#reload.period: 10s | |
#==================== Elasticsearch template setting ========================== | |
setup.template.settings: | |
index.number_of_shards: 1 | |
index.codec: best_compression | |
#_source.enabled: false | |
#================================ General ===================================== | |
# The name of the shipper that publishes the network data. It can be used to group | |
# all the transactions sent by a single shipper in the web interface. | |
#name: | |
# The tags of the shipper are included in their own field with each | |
# transaction published. | |
#tags: ["service-X", "web-tier"][1;1H[?12l[?25h[?25l[38;1H/[?12l[?25hlogging | |
[?25l[27m[m[H[2J[1;3H# The Logstash hosts | |
#hosts: ["localhost:5044"] | |
hosts: ["162.70.27.206:15043"] | |
# Optional SSL. By default is off. | |
# List of root certificates for HTTPS server verifications | |
#ssl.certificate_authorities: ["/etc/pki/root/ca.pem"] | |
# Certificate for SSL client authentication | |
#ssl.certificate: "/etc/pki/client/cert.pem" | |
# Client Certificate Key | |
#ssl.key: "/etc/pki/client/cert.key" | |
#================================ Logging ===================================== | |
# Sets log level. The default log level is info. | |
# Available log levels are: error, warning, info, debug | |
logging.level: debug | |
# At debug level, you can selectively enable logging only for some components. | |
# To enable all selectors use ["*"]. Examples of other selectors are "beat", | |
# "publish", "service". | |
#logging.selectors: ["*"] | |
#============================== Xpack Monitoring =============================== | |
# metricbeat can export internal metrics to a central Elasticsearch monitoring | |
# cluster. This requires xpack monitoring to be enabled in Elasticsearch. The | |
# reporting is disabled by default. | |
# Set to true to enable the monitoring reporter. | |
#xpack.monitoring.enabled: false | |
# Uncomment to send the metrics to Elasticsearch. Most settings from the | |
# Elasticsearch output are accepted here as well. Any setting that is not set is | |
# automatically inherited from the Elasticsearch output configuration, so if you | |
# have the Elasticsearch output configured, you can simply uncomment the[19;1H[?12l[?25h[?25l[38;1H/logging | |
[21;46H[?12l[?25h[?25l[38;1H[24;2H[?12l[?25h[?25l[38;1H[31msearch hit BOTTOM, continuing at TOP[19;1H[?12l[?25h | |
[?25l[mlogging.selectors: ["*"][24;25H[K[24;1H[?12l[?25h[?25l[38;1H[K[38;1H:[?12l[?25hwq | |
[?25l"metricbeat.yml" 136L, 5218C written | |
[?1l>[?12l[?25h[?1049l]0;root@lin-play-02:/etc/metricbeatlin-play-02>root>>/etc/metricbeat>>cd /var/log/metricbeat/ | |
]0;root@lin-play-02:/var/log/metricbeatlin-play-02>root>>/var/log/metricbeat>>ll | |
total 4880 | |
-rw------- 1 root root 4992261 Jun 19 11:14 metricbeat | |
]0;root@lin-play-02:/var/log/metricbeatlin-play-02>root>>/var/log/metricbeat>>mv metricbeat metricbeat.old | |
]0;root@lin-play-02:/var/log/metricbeatlin-play-02>root>>/var/log/metricbeat>>ll | |
total 4880 | |
-rw------- 1 root root 4992261 Jun 19 11:14 metricbeat.old | |
]0;root@lin-play-02:/var/log/metricbeatlin-play-02>root>>/var/log/metricbeat>>service metricbeat start | |
Starting metricbeat (via systemctl): [60G[[0;32m OK [0;39m] | |
]0;root@lin-play-02:/var/log/metricbeatlin-play-02>root>>/var/log/metricbeat>>ll | |
total 4916 | |
-rw------- 1 root root 4992261 Jun 19 11:14 metricbeat.old | |
-rw------- 1 root root 34771 Jun 19 11:16 metricbeat | |
]0;root@lin-play-02:/var/log/metricbeatlin-play-02>root>>/var/log/metricbeat>>tail -f metricbeat | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:16:39.503-0700 DEBUG [logstash] logstash/async.go:94 connect | |
2018-06-19T11:16:39.508-0700 DEBUG [logstash] logstash/async.go:142 27 events out of 27 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T11:16:48.503-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:48.502Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"load": { | |
"15": 0.05, | |
"norm": { | |
"15": 0.0125, | |
"1": 0.0025, | |
"5": 0.005 | |
}, | |
"cores": 4, | |
"1": 0.01, | |
"5": 0.02 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 239, | |
"name": "load" | |
} | |
} | |
2018-06-19T11:16:48.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:48.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 254, | |
"name": "memory", | |
"module": "system" | |
}, | |
"system": { | |
"memory": { | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
}, | |
"total": 8202727424, | |
"used": { | |
"pct": 0.2168, | |
"bytes": 1778057216 | |
}, | |
"free": 6424670208, | |
"actual": { | |
"free": 7315681280, | |
"used": { | |
"pct": 0.1081, | |
"bytes": 887046144 | |
} | |
} | |
} | |
} | |
} | |
2018-06-19T11:16:48.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:48.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 164 | |
}, | |
"system": { | |
"cpu": { | |
"user": { | |
"pct": 0.015 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.029 | |
}, | |
"cores": 4, | |
"system": { | |
"pct": 0.013 | |
}, | |
"softirq": { | |
"pct": 0.001 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"idle": { | |
"pct": 3.971 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:16:48.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:48.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 234, | |
"name": "network", | |
"module": "system" | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8825578021, | |
"packets": 34079436 | |
}, | |
"out": { | |
"bytes": 1543796484, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13643095 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:16:48.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:48.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 245 | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6610049183, | |
"packets": 1711578 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1711578, | |
"bytes": 6610049183 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:16:48.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:48.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 573, | |
"name": "network", | |
"module": "system" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:16:48.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:48.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 581 | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
}, | |
"name": "virbr0" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:16:48.587-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:48.546Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 40576, | |
"namespace": "system.process.summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"total": 190, | |
"sleeping": 190, | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:16:48.728-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 8 processes | |
2018-06-19T11:16:48.730-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:48.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 95658, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"name": "metricbeat", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"ppid": 1, | |
"state": "sleeping", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 7 | |
}, | |
"memory": { | |
"size": 422703104, | |
"rss": { | |
"bytes": 24604672, | |
"pct": 0.003 | |
}, | |
"share": 13602816 | |
}, | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"pct": 0.0158, | |
"norm": { | |
"pct": 0.004 | |
}, | |
"value": 440 | |
}, | |
"start_time": "2018-06-19T18:16:38.000Z" | |
}, | |
"pgid": 31324, | |
"pid": 31324, | |
"username": "root" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:16:48.730-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:48.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"cmdline": "/usr/bin/graylog-collector-sidecar", | |
"ppid": 1, | |
"cpu": { | |
"total": { | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
}, | |
"value": 278280 | |
}, | |
"start_time": "2018-06-12T23:29:12.000Z" | |
}, | |
"pgid": 704, | |
"memory": { | |
"share": 4067328, | |
"size": 373985280, | |
"rss": { | |
"bytes": 10014720, | |
"pct": 0.0012 | |
} | |
}, | |
"name": "graylog-collect", | |
"state": "sleeping", | |
"username": "root", | |
"fd": { | |
"open": 8, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 704, | |
"cwd": "/" | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 95707 | |
} | |
} | |
2018-06-19T11:16:48.730-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:48.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 95714 | |
}, | |
"system": { | |
"process": { | |
"pgid": 1171, | |
"state": "sleeping", | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0005 | |
}, | |
"value": 692920, | |
"pct": 0.002 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 4 | |
}, | |
"ppid": 1171, | |
"name": "xymond", | |
"memory": { | |
"size": 51286016, | |
"rss": { | |
"bytes": 8130560, | |
"pct": 0.001 | |
}, | |
"share": 2699264 | |
}, | |
"pid": 1319, | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"username": "xymon" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:16:48.730-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:48.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 96097 | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"cwd": "/", | |
"ppid": 1, | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"pct": 0.0062, | |
"bytes": 51044352 | |
}, | |
"share": 11227136 | |
}, | |
"cpu": { | |
"start_time": "2018-06-12T23:29:34.000Z", | |
"total": { | |
"value": 1.27151e+06, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
} | |
}, | |
"pgid": 1168, | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 1168, | |
"username": "root", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"name": "python" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:16:48.731-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:48.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 96110 | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 0, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"name": "xfsaild/dm-0", | |
"pgid": 0, | |
"cpu": { | |
"total": { | |
"value": 222440, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0002 | |
} | |
}, | |
"start_time": "2018-06-12T23:28:53.000Z" | |
}, | |
"pid": 428, | |
"ppid": 2, | |
"username": "root", | |
"memory": { | |
"size": 0, | |
"rss": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"share": 0 | |
}, | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:16:48.731-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:48.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 96258, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"pgid": 1674, | |
"memory": { | |
"share": 48148480, | |
"size": 2004910080, | |
"rss": { | |
"pct": 0.0174, | |
"bytes": 142917632 | |
} | |
}, | |
"name": "gnome-shell", | |
"state": "sleeping", | |
"username": "gdm", | |
"cmdline": "/usr/bin/gnome-shell", | |
"cwd": "/var/lib/gdm", | |
"cpu": { | |
"start_time": "2018-06-12T23:29:50.000Z", | |
"total": { | |
"value": 202070, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
} | |
}, | |
"pid": 1714, | |
"ppid": 1674, | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:16:48.731-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:48.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 96345, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"pct": 0.0029, | |
"bytes": 24178688 | |
}, | |
"share": 23781376 | |
}, | |
"name": "systemd-journal", | |
"pid": 509, | |
"pgid": 509, | |
"cwd": "/", | |
"cpu": { | |
"start_time": "2018-06-12T23:29:04.000Z", | |
"total": { | |
"value": 45880, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
} | |
}, | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"ppid": 1, | |
"state": "sleeping", | |
"username": "root", | |
"cmdline": "/usr/lib/systemd/systemd-journald" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:16:48.731-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:48.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 96527, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"pid": 7713, | |
"state": "sleeping", | |
"ppid": 1, | |
"name": "rhsmd", | |
"memory": { | |
"size": 302505984, | |
"rss": { | |
"bytes": 21835776, | |
"pct": 0.0027 | |
}, | |
"share": 8269824 | |
}, | |
"fd": { | |
"open": 8, | |
"limit": { | |
"soft": 2144, | |
"hard": 2144 | |
} | |
}, | |
"pgid": 716, | |
"username": "root", | |
"cpu": { | |
"total": { | |
"value": 240, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-16T14:48:53.000Z" | |
}, | |
"cmdline": "/usr/bin/python /usr/libexec/rhsmd", | |
"cwd": "/" | |
} | |
} | |
} | |
2018-06-19T11:16:49.506-0700 DEBUG [logstash] logstash/async.go:142 16 events out of 16 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T11:16:58.503-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:58.502Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 193, | |
"name": "load" | |
}, | |
"system": { | |
"load": { | |
"cores": 4, | |
"1": 0.01, | |
"5": 0.02, | |
"15": 0.05, | |
"norm": { | |
"15": 0.0125, | |
"1": 0.0025, | |
"5": 0.005 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:16:58.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:58.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"memory": { | |
"total": 8202727424, | |
"used": { | |
"bytes": 1778581504, | |
"pct": 0.2168 | |
}, | |
"free": 6424145920, | |
"actual": { | |
"free": 7315173376, | |
"used": { | |
"pct": 0.1082, | |
"bytes": 887554048 | |
} | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 270 | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:16:58.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:58.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 182, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"bytes": 1543821387, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13643165 | |
}, | |
"name": "ens192", | |
"in": { | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8825688327, | |
"packets": 34079712 | |
} | |
} | |
} | |
} | |
2018-06-19T11:16:58.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:58.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 192, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1711592, | |
"bytes": 6610129094 | |
}, | |
"name": "lo", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6610129094, | |
"packets": 1711592 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:16:58.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:58.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 198, | |
"name": "network", | |
"module": "system" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:16:58.505-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:58.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 221 | |
}, | |
"system": { | |
"cpu": { | |
"user": { | |
"pct": 0.014 | |
}, | |
"idle": { | |
"pct": 3.976 | |
}, | |
"softirq": { | |
"pct": 0 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"cores": 4, | |
"iowait": { | |
"pct": 0 | |
}, | |
"system": { | |
"pct": 0.01 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.024 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:16:58.505-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:58.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
}, | |
"name": "virbr0", | |
"in": { | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 431, | |
"name": "network" | |
} | |
} | |
2018-06-19T11:16:58.583-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:58.546Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 36850, | |
"namespace": "system.process.summary", | |
"name": "process_summary", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"total": 190, | |
"sleeping": 190, | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:16:58.726-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 8 processes | |
2018-06-19T11:16:58.727-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:58.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"value": 600, | |
"pct": 0.016, | |
"norm": { | |
"pct": 0.004 | |
} | |
}, | |
"start_time": "2018-06-19T18:16:38.000Z" | |
}, | |
"ppid": 1, | |
"pgid": 31324, | |
"pid": 31324, | |
"state": "sleeping", | |
"memory": { | |
"size": 422703104, | |
"rss": { | |
"bytes": 24678400, | |
"pct": 0.003 | |
}, | |
"share": 13606912 | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"fd": { | |
"open": 7, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"name": "metricbeat", | |
"username": "root" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 93115 | |
} | |
} | |
2018-06-19T11:16:58.728-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:58.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"ppid": 1, | |
"cwd": "/", | |
"pid": 1168, | |
"memory": { | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136, | |
"size": 1634631680 | |
}, | |
"cpu": { | |
"total": { | |
"value": 1.27153e+06, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"username": "root", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"pgid": 1168, | |
"name": "python", | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 93143 | |
} | |
} | |
2018-06-19T11:16:58.728-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:58.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 93148, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"name": "filebeat", | |
"state": "sleeping", | |
"cmdline": "/usr/bin/filebeat -c /etc/graylog/collector-sidecar/generated/filebeat.yml", | |
"ppid": 704, | |
"cpu": { | |
"start_time": "2018-06-12T23:29:19.000Z", | |
"total": { | |
"value": 368640, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
} | |
}, | |
"fd": { | |
"open": 6, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 831, | |
"memory": { | |
"size": 629047296, | |
"rss": { | |
"bytes": 15175680, | |
"pct": 0.0019 | |
}, | |
"share": 8273920 | |
}, | |
"pgid": 704, | |
"username": "root", | |
"cwd": "/" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:16:58.728-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:58.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"username": "root", | |
"pid": 1, | |
"state": "sleeping", | |
"cmdline": "/usr/lib/systemd/systemd --switched-root --system --deserialize 21", | |
"fd": { | |
"open": 49, | |
"limit": { | |
"soft": 65536, | |
"hard": 65536 | |
} | |
}, | |
"pgid": 1, | |
"name": "systemd", | |
"memory": { | |
"size": 195588096, | |
"rss": { | |
"bytes": 4194304, | |
"pct": 0.0005 | |
}, | |
"share": 2605056 | |
}, | |
"cwd": "/", | |
"ppid": 0, | |
"cpu": { | |
"start_time": "2018-06-12T23:28:51.000Z", | |
"total": { | |
"value": 188420, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
} | |
} | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 93506 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:16:58.728-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:58.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 93520, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"pid": 1319, | |
"pgid": 1171, | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"ppid": 1171, | |
"username": "xymon", | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"value": 692930, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"fd": { | |
"open": 4, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"memory": { | |
"rss": { | |
"bytes": 8130560, | |
"pct": 0.001 | |
}, | |
"share": 2699264, | |
"size": 51286016 | |
}, | |
"name": "xymond" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:16:58.728-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:58.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 93724, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 1674, | |
"name": "gnome-shell", | |
"cmdline": "/usr/bin/gnome-shell", | |
"pid": 1714, | |
"ppid": 1674, | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"pct": 0.0174, | |
"bytes": 142917632 | |
}, | |
"share": 48148480 | |
}, | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"value": 202070, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"cwd": "/var/lib/gdm", | |
"username": "gdm" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:16:58.728-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:58.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 93837, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"pid": 509, | |
"ppid": 1, | |
"pgid": 509, | |
"cpu": { | |
"total": { | |
"value": 45880, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"cwd": "/", | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"name": "systemd-journal", | |
"memory": { | |
"rss": { | |
"pct": 0.0029, | |
"bytes": 24178688 | |
}, | |
"share": 23781376, | |
"size": 62988288 | |
}, | |
"state": "sleeping", | |
"username": "root" | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:16:58.728-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:16:58.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 93885, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"pid": 7713, | |
"cwd": "/", | |
"state": "sleeping", | |
"username": "root", | |
"ppid": 1, | |
"pgid": 716, | |
"name": "rhsmd", | |
"cpu": { | |
"total": { | |
"value": 240, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-16T14:48:53.000Z" | |
}, | |
"fd": { | |
"limit": { | |
"soft": 2144, | |
"hard": 2144 | |
}, | |
"open": 8 | |
}, | |
"memory": { | |
"share": 8269824, | |
"size": 302505984, | |
"rss": { | |
"bytes": 21835776, | |
"pct": 0.0027 | |
} | |
}, | |
"cmdline": "/usr/bin/python /usr/libexec/rhsmd" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:16:59.505-0700 DEBUG [logstash] logstash/async.go:142 16 events out of 16 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T11:17:08.503-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:08.502Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 173 | |
}, | |
"system": { | |
"load": { | |
"cores": 4, | |
"1": 0.01, | |
"5": 0.02, | |
"15": 0.05, | |
"norm": { | |
"15": 0.0125, | |
"1": 0.0025, | |
"5": 0.005 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:08.503-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":260,"time":271},"total":{"ticks":610,"time":630,"value":610},"user":{"ticks":350,"time":359}},"info":{"ephemeral_id":"aabad21d-7d4e-4b1c-9da6-f5dbd3f9f1b3","uptime":{"ms":30058}},"memstats":{"gc_next":7364448,"memory_alloc":3689248,"memory_total":51812456,"rss":24678400}},"libbeat":{"config":{"module":{"running":3,"starts":3},"reloads":1},"output":{"events":{"acked":59,"batches":3,"total":59},"read":{"bytes":18},"type":"logstash","write":{"bytes":7540}},"pipeline":{"clients":6,"events":{"active":0,"filtered":26,"published":59,"retry":27,"total":85},"queue":{"acked":59}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"filesystem":{"events":33,"success":33},"fsstat":{"events":1,"success":1},"load":{"events":4,"success":4},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":26,"success":26},"process_summary":{"events":3,"success":3},"uptime":{"events":1,"success":1}}},"system":{"cpu":{"cores":4},"load":{"1":0.01,"15":0.05,"5":0.02,"norm":{"1":0.0025,"15":0.0125,"5":0.005}}}}}} | |
2018-06-19T11:17:08.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:08.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 130 | |
}, | |
"system": { | |
"cpu": { | |
"iowait": { | |
"pct": 0 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"cores": 4, | |
"user": { | |
"pct": 0.015 | |
}, | |
"idle": { | |
"pct": 3.975 | |
}, | |
"softirq": { | |
"pct": 0 | |
}, | |
"system": { | |
"pct": 0.01 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.025 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:08.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:08.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 362, | |
"name": "memory" | |
}, | |
"system": { | |
"memory": { | |
"free": 6423732224, | |
"actual": { | |
"free": 7314776064, | |
"used": { | |
"pct": 0.1083, | |
"bytes": 887951360 | |
} | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1778995200, | |
"pct": 0.2169 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:17:08.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:08.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 246 | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"bytes": 8826087151, | |
"packets": 34080200, | |
"errors": 0, | |
"dropped": 1698 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13643372, | |
"bytes": 1543859983 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:08.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:08.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"bytes": 6610473980, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1711667 | |
}, | |
"name": "lo", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6610473980, | |
"packets": 1711667 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 256, | |
"name": "network" | |
} | |
} | |
2018-06-19T11:17:08.505-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:08.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 449 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:08.505-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:08.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 608 | |
} | |
} | |
2018-06-19T11:17:08.579-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:08.546Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 33109, | |
"namespace": "system.process.summary", | |
"name": "process_summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"total": 190, | |
"sleeping": 190, | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:17:08.730-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 8 processes | |
2018-06-19T11:17:08.731-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:08.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 97075 | |
}, | |
"system": { | |
"process": { | |
"cwd": "/", | |
"ppid": 1, | |
"pgid": 31324, | |
"name": "metricbeat", | |
"state": "running", | |
"username": "root", | |
"pid": 31324, | |
"memory": { | |
"share": 13733888, | |
"size": 490897408, | |
"rss": { | |
"bytes": 25067520, | |
"pct": 0.0031 | |
} | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"fd": { | |
"open": 7, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"cpu": { | |
"total": { | |
"pct": 0.018, | |
"norm": { | |
"pct": 0.0045 | |
}, | |
"value": 780 | |
}, | |
"start_time": "2018-06-19T18:16:38.000Z" | |
} | |
} | |
} | |
} | |
2018-06-19T11:17:08.732-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:08.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 97110, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"ppid": 1, | |
"state": "sleeping", | |
"username": "root", | |
"memory": { | |
"share": 11227136, | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
} | |
}, | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"name": "python", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0008 | |
}, | |
"value": 1.27156e+06, | |
"pct": 0.003 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"pgid": 1168, | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"cwd": "/", | |
"pid": 1168 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:08.732-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:08.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 97116 | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"username": "root", | |
"memory": { | |
"size": 312348672, | |
"rss": { | |
"bytes": 6344704, | |
"pct": 0.0008 | |
}, | |
"share": 4878336 | |
}, | |
"ppid": 1, | |
"cwd": "/", | |
"cpu": { | |
"start_time": "2018-06-12T23:29:16.000Z", | |
"total": { | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
}, | |
"value": 612390 | |
} | |
}, | |
"pid": 747, | |
"pgid": 747, | |
"name": "vmtoolsd", | |
"cmdline": "/usr/bin/vmtoolsd", | |
"fd": { | |
"open": 8, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:08.732-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:08.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 97591 | |
}, | |
"system": { | |
"process": { | |
"ppid": 1171, | |
"cwd": "/", | |
"fd": { | |
"open": 4, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"username": "xymon", | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"pid": 1319, | |
"memory": { | |
"size": 51286016, | |
"rss": { | |
"pct": 0.001, | |
"bytes": 8130560 | |
}, | |
"share": 2699264 | |
}, | |
"cpu": { | |
"total": { | |
"value": 692950, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"pgid": 1171, | |
"name": "xymond", | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:08.732-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:08.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 97599 | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"share": 0, | |
"size": 0, | |
"rss": { | |
"bytes": 0, | |
"pct": 0 | |
} | |
}, | |
"fd": { | |
"open": 0, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 0, | |
"state": "sleeping", | |
"pid": 21, | |
"name": "watchdog/3", | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"value": 2280, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
}, | |
"start_time": "2018-06-12T23:28:51.000Z" | |
}, | |
"ppid": 2, | |
"username": "root" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:08.732-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:08.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 97603, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"pgid": 1674, | |
"ppid": 1674, | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"pct": 0.0174, | |
"bytes": 142921728 | |
}, | |
"share": 48148480 | |
}, | |
"cwd": "/var/lib/gdm", | |
"name": "gnome-shell", | |
"state": "sleeping", | |
"cmdline": "/usr/bin/gnome-shell", | |
"username": "gdm", | |
"cpu": { | |
"total": { | |
"value": 202080, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 1714 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:08.732-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:08.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 97945, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 24182784, | |
"pct": 0.0029 | |
}, | |
"share": 23785472 | |
}, | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 45880 | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"pid": 509, | |
"username": "root", | |
"pgid": 509, | |
"cwd": "/", | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"name": "systemd-journal", | |
"state": "sleeping", | |
"ppid": 1, | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:17:08.732-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:08.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"username": "root", | |
"memory": { | |
"size": 302505984, | |
"rss": { | |
"bytes": 21835776, | |
"pct": 0.0027 | |
}, | |
"share": 8269824 | |
}, | |
"pid": 7713, | |
"name": "rhsmd", | |
"state": "sleeping", | |
"ppid": 1, | |
"cmdline": "/usr/bin/python /usr/libexec/rhsmd", | |
"cwd": "/", | |
"cpu": { | |
"start_time": "2018-06-16T14:48:53.000Z", | |
"total": { | |
"value": 240, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
} | |
}, | |
"fd": { | |
"open": 8, | |
"limit": { | |
"soft": 2144, | |
"hard": 2144 | |
} | |
}, | |
"pgid": 716 | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 97952 | |
} | |
} | |
2018-06-19T11:17:09.507-0700 DEBUG [logstash] logstash/async.go:142 16 events out of 16 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T11:17:18.503-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:18.502Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 179 | |
}, | |
"system": { | |
"load": { | |
"cores": 4, | |
"1": 0.01, | |
"5": 0.02, | |
"15": 0.05, | |
"norm": { | |
"1": 0.0025, | |
"5": 0.005, | |
"15": 0.0125 | |
} | |
} | |
} | |
} | |
2018-06-19T11:17:18.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:18.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"memory": { | |
"free": 6421299200, | |
"actual": { | |
"used": { | |
"pct": 0.1085, | |
"bytes": 890368000 | |
}, | |
"free": 7312359424 | |
}, | |
"swap": { | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552, | |
"total": 2147479552 | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1781428224, | |
"pct": 0.2172 | |
} | |
} | |
}, | |
"metricset": { | |
"rtt": 273, | |
"name": "memory", | |
"module": "system" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:18.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:18.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 230, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8826290924, | |
"packets": 34080539 | |
}, | |
"out": { | |
"bytes": 1543890594, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13643490 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:18.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:18.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 241 | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"dropped": 0, | |
"bytes": 6610621383, | |
"packets": 1711684, | |
"errors": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 1711684, | |
"bytes": 6610621383, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:17:18.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:18.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 173 | |
}, | |
"system": { | |
"cpu": { | |
"steal": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.012 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0 | |
}, | |
"idle": { | |
"pct": 3.975 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.025 | |
}, | |
"system": { | |
"pct": 0.013 | |
}, | |
"cores": 4 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:18.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:18.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 468 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:18.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:18.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 479 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0 | |
}, | |
"out": { | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:18.581-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:18.546Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 190, | |
"sleeping": 190, | |
"running": 0 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 35148, | |
"namespace": "system.process.summary" | |
} | |
} | |
2018-06-19T11:17:18.729-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 8 processes | |
2018-06-19T11:17:18.731-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:18.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 96545 | |
}, | |
"system": { | |
"process": { | |
"pgid": 31324, | |
"state": "sleeping", | |
"fd": { | |
"open": 7, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 31324, | |
"memory": { | |
"size": 558006272, | |
"rss": { | |
"bytes": 25640960, | |
"pct": 0.0031 | |
}, | |
"share": 13742080 | |
}, | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"pct": 0.015, | |
"norm": { | |
"pct": 0.0038 | |
}, | |
"value": 930 | |
}, | |
"start_time": "2018-06-19T18:16:38.000Z" | |
}, | |
"username": "root", | |
"ppid": 1, | |
"name": "metricbeat", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:18.731-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:18.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 96574, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"pgid": 1168, | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"cwd": "/", | |
"ppid": 1, | |
"state": "sleeping", | |
"fd": { | |
"open": 11, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"pid": 1168, | |
"name": "python", | |
"username": "root", | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136 | |
}, | |
"cpu": { | |
"total": { | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
}, | |
"value": 1.27158e+06 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
} | |
} | |
} | |
} | |
2018-06-19T11:17:18.731-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:18.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 96580 | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"start_time": "2018-06-12T23:28:53.000Z", | |
"total": { | |
"value": 222450, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
} | |
}, | |
"pid": 428, | |
"pgid": 0, | |
"memory": { | |
"share": 0, | |
"size": 0, | |
"rss": { | |
"bytes": 0, | |
"pct": 0 | |
} | |
}, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 0 | |
}, | |
"ppid": 2, | |
"name": "xfsaild/dm-0", | |
"state": "sleeping", | |
"username": "root" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:18.731-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:18.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 96997 | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 0, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"pid": 16736, | |
"memory": { | |
"size": 0, | |
"rss": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"share": 0 | |
}, | |
"name": "kworker/u8:2", | |
"cpu": { | |
"total": { | |
"value": 390, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0002 | |
} | |
}, | |
"start_time": "2018-06-19T16:01:01.000Z" | |
}, | |
"state": "sleeping", | |
"username": "root", | |
"ppid": 2, | |
"pgid": 0 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:18.731-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:18.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 97014 | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 195588096, | |
"rss": { | |
"bytes": 4194304, | |
"pct": 0.0005 | |
}, | |
"share": 2605056 | |
}, | |
"cmdline": "/usr/lib/systemd/systemd --switched-root --system --deserialize 21", | |
"cpu": { | |
"total": { | |
"value": 188420, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:28:51.000Z" | |
}, | |
"ppid": 0, | |
"pid": 1, | |
"state": "sleeping", | |
"cwd": "/", | |
"fd": { | |
"open": 49, | |
"limit": { | |
"soft": 65536, | |
"hard": 65536 | |
} | |
}, | |
"pgid": 1, | |
"name": "systemd", | |
"username": "root" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:18.731-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:18.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 97207, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 202080 | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"name": "gnome-shell", | |
"username": "gdm", | |
"ppid": 1674, | |
"state": "sleeping", | |
"cmdline": "/usr/bin/gnome-shell", | |
"pid": 1714, | |
"cwd": "/var/lib/gdm", | |
"pgid": 1674, | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"pct": 0.0174, | |
"bytes": 142921728 | |
}, | |
"share": 48148480 | |
} | |
} | |
} | |
} | |
2018-06-19T11:17:18.732-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:18.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 97218 | |
}, | |
"system": { | |
"process": { | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 24182784, | |
"pct": 0.0029 | |
}, | |
"share": 23785472 | |
}, | |
"cwd": "/", | |
"fd": { | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
}, | |
"open": 52 | |
}, | |
"name": "systemd-journal", | |
"cpu": { | |
"total": { | |
"value": 45880, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"pgid": 509, | |
"state": "sleeping", | |
"username": "root", | |
"pid": 509, | |
"ppid": 1 | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:17:18.732-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:18.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 97441 | |
}, | |
"system": { | |
"process": { | |
"cmdline": "/usr/bin/python /usr/libexec/rhsmd", | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 240 | |
}, | |
"start_time": "2018-06-16T14:48:53.000Z" | |
}, | |
"fd": { | |
"open": 8, | |
"limit": { | |
"soft": 2144, | |
"hard": 2144 | |
} | |
}, | |
"pid": 7713, | |
"pgid": 716, | |
"name": "rhsmd", | |
"memory": { | |
"share": 8269824, | |
"size": 302505984, | |
"rss": { | |
"bytes": 21835776, | |
"pct": 0.0027 | |
} | |
}, | |
"username": "root", | |
"cwd": "/", | |
"ppid": 1, | |
"state": "sleeping" | |
} | |
} | |
} | |
2018-06-19T11:17:19.506-0700 DEBUG [logstash] logstash/async.go:142 16 events out of 16 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T11:17:28.503-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:28.502Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"load": { | |
"cores": 4, | |
"1": 0.01, | |
"5": 0.02, | |
"15": 0.05, | |
"norm": { | |
"1": 0.0025, | |
"5": 0.005, | |
"15": 0.0125 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 197 | |
} | |
} | |
2018-06-19T11:17:28.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:28.503Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 266 | |
}, | |
"system": { | |
"memory": { | |
"total": 8202727424, | |
"used": { | |
"bytes": 1784217600, | |
"pct": 0.2175 | |
}, | |
"free": 6418509824, | |
"actual": { | |
"free": 7309586432, | |
"used": { | |
"pct": 0.1089, | |
"bytes": 893140992 | |
} | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:28.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:28.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 160, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"bytes": 8826345553, | |
"packets": 34081056, | |
"errors": 0, | |
"dropped": 1698 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13643784, | |
"bytes": 1543933783 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:28.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:28.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 178, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"bytes": 6610685497, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1711706 | |
}, | |
"name": "lo", | |
"in": { | |
"dropped": 0, | |
"bytes": 6610685497, | |
"packets": 1711706, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:28.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:28.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 184, | |
"name": "network", | |
"module": "system" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:28.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:28.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"cpu": { | |
"system": { | |
"pct": 0.015 | |
}, | |
"idle": { | |
"pct": 3.968 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.016 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.032 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0.001 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"cores": 4 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 160, | |
"name": "cpu" | |
} | |
} | |
2018-06-19T11:17:28.505-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:28.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 575 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:28.581-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:28.546Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 34447, | |
"namespace": "system.process.summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"sleeping": 190, | |
"running": 1, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 191 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:28.752-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 8 processes | |
2018-06-19T11:17:28.755-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:28.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"username": "root", | |
"cpu": { | |
"total": { | |
"value": 1120, | |
"pct": 0.019, | |
"norm": { | |
"pct": 0.0047 | |
} | |
}, | |
"start_time": "2018-06-19T18:16:38.000Z" | |
}, | |
"pid": 31324, | |
"memory": { | |
"size": 558006272, | |
"rss": { | |
"bytes": 25948160, | |
"pct": 0.0032 | |
}, | |
"share": 13762560 | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"name": "metricbeat", | |
"pgid": 31324, | |
"cwd": "/", | |
"ppid": 1, | |
"state": "sleeping", | |
"fd": { | |
"open": 7, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 120507 | |
} | |
} | |
2018-06-19T11:17:28.755-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:28.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 120559 | |
}, | |
"system": { | |
"process": { | |
"ppid": 1171, | |
"memory": { | |
"size": 51286016, | |
"rss": { | |
"pct": 0.001, | |
"bytes": 8130560 | |
}, | |
"share": 2699264 | |
}, | |
"cwd": "/", | |
"pid": 1319, | |
"state": "sleeping", | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"cpu": { | |
"total": { | |
"value": 692970, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"username": "xymon", | |
"fd": { | |
"open": 4, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 1171, | |
"name": "xymond" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:28.755-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:28.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 120569, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"username": "root", | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"value": 1.2716e+06, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"name": "python", | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136 | |
}, | |
"pid": 1168, | |
"ppid": 1, | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 1168 | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:17:28.756-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:28.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 121271, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"ppid": 1, | |
"memory": { | |
"rss": { | |
"pct": 0.0008, | |
"bytes": 6344704 | |
}, | |
"share": 4878336, | |
"size": 312348672 | |
}, | |
"pid": 747, | |
"cwd": "/", | |
"state": "sleeping", | |
"username": "root", | |
"cpu": { | |
"total": { | |
"value": 612410, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:16.000Z" | |
}, | |
"pgid": 747, | |
"name": "vmtoolsd", | |
"cmdline": "/usr/bin/vmtoolsd", | |
"fd": { | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
}, | |
"open": 8 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:28.756-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:28.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 121282, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"username": "root", | |
"cwd": "/", | |
"ppid": 1, | |
"cmdline": "/usr/bin/graylog-collector-sidecar", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0002 | |
}, | |
"value": 278290, | |
"pct": 0.001 | |
}, | |
"start_time": "2018-06-12T23:29:12.000Z" | |
}, | |
"pid": 704, | |
"pgid": 704, | |
"state": "sleeping", | |
"name": "graylog-collect", | |
"memory": { | |
"size": 373985280, | |
"rss": { | |
"bytes": 10014720, | |
"pct": 0.0012 | |
}, | |
"share": 4067328 | |
}, | |
"fd": { | |
"open": 8, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:28.756-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:28.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 121289 | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142921728, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"ppid": 1674, | |
"username": "gdm", | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"state": "sleeping", | |
"cmdline": "/usr/bin/gnome-shell", | |
"cwd": "/var/lib/gdm", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 202080, | |
"pct": 0 | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"pid": 1714, | |
"pgid": 1674, | |
"name": "gnome-shell" | |
} | |
} | |
} | |
2018-06-19T11:17:28.756-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:28.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 121648 | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"total": { | |
"value": 45880, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"cwd": "/", | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"pid": 509, | |
"ppid": 1, | |
"name": "systemd-journal", | |
"state": "sleeping", | |
"username": "root", | |
"pgid": 509, | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"pct": 0.0029, | |
"bytes": 24182784 | |
}, | |
"share": 23785472 | |
}, | |
"fd": { | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
}, | |
"open": 52 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:28.756-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:28.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 121828, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"ppid": 1, | |
"pgid": 716, | |
"username": "root", | |
"memory": { | |
"size": 302505984, | |
"rss": { | |
"bytes": 21835776, | |
"pct": 0.0027 | |
}, | |
"share": 8269824 | |
}, | |
"cmdline": "/usr/bin/python /usr/libexec/rhsmd", | |
"pid": 7713, | |
"cpu": { | |
"start_time": "2018-06-16T14:48:53.000Z", | |
"total": { | |
"value": 240, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
} | |
}, | |
"fd": { | |
"open": 8, | |
"limit": { | |
"soft": 2144, | |
"hard": 2144 | |
} | |
}, | |
"name": "rhsmd", | |
"state": "sleeping", | |
"cwd": "/" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:17:29.506-0700 DEBUG [logstash] logstash/async.go:142 16 events out of 16 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T11:17:38.502-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":500,"time":502},"total":{"ticks":1140,"time":1148,"value":1140},"user":{"ticks":640,"time":646}},"info":{"ephemeral_id":"aabad21d-7d4e-4b1c-9da6-f5dbd3f9f1b3","uptime":{"ms":60058}},"memstats":{"gc_next":7318176,"memory_alloc":3666704,"memory_total":96705120,"rss":1269760}},"libbeat":{"config":{"module":{"running":3}},"output":{"events":{"acked":48,"batches":3,"total":48},"read":{"bytes":18},"write":{"bytes":6670}},"pipeline":{"clients":6,"events":{"active":0,"published":48,"total":48},"queue":{"acked":48}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"load":{"events":2,"success":2},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":24,"success":24},"process_summary":{"events":3,"success":3}}},"system":{"load":{"1":0.01,"15":0.05,"5":0.02,"norm":{"1":0.0025,"15":0.0125,"5":0.005}}}}}} | |
2018-06-19T11:17:38.503-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:38.502Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 151 | |
}, | |
"system": { | |
"load": { | |
"norm": { | |
"1": 0.0025, | |
"5": 0.005, | |
"15": 0.0125 | |
}, | |
"cores": 4, | |
"1": 0.01, | |
"5": 0.02, | |
"15": 0.05 | |
} | |
} | |
} | |
2018-06-19T11:17:38.504-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: / total=18746441728, used=6683131904, free=12063309824 | |
2018-06-19T11:17:38.504-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys total=0, used=0, free=0 | |
2018-06-19T11:17:38.504-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc total=0, used=0, free=0 | |
2018-06-19T11:17:38.504-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev total=4084723712, used=0, free=4084723712 | |
2018-06-19T11:17:38.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:38.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 149 | |
}, | |
"system": { | |
"cpu": { | |
"softirq": { | |
"pct": 0.001 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.0572 | |
}, | |
"user": { | |
"pct": 0.0241 | |
}, | |
"system": { | |
"pct": 0.0321 | |
}, | |
"cores": 4, | |
"idle": { | |
"pct": 3.9428 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"nice": { | |
"pct": 0 | |
} | |
} | |
} | |
} | |
2018-06-19T11:17:38.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:38.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 175, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"packets": 34082242, | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8826720427 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13644651, | |
"bytes": 1544021530 | |
} | |
} | |
} | |
} | |
2018-06-19T11:17:38.504-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/security total=0, used=0, free=0 | |
2018-06-19T11:17:38.504-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/shm total=4101361664, used=81920, free=4101279744 | |
2018-06-19T11:17:38.504-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/pts total=0, used=0, free=0 | |
2018-06-19T11:17:38.504-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run total=4101361664, used=76468224, free=4024893440 | |
2018-06-19T11:17:38.504-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup total=4101361664, used=0, free=4101361664 | |
2018-06-19T11:17:38.504-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/systemd total=0, used=0, free=0 | |
2018-06-19T11:17:38.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:38.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 185 | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"dropped": 0, | |
"bytes": 6610999166, | |
"packets": 1711812, | |
"errors": 0 | |
}, | |
"out": { | |
"packets": 1711812, | |
"bytes": 6610999166, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:38.504-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/pstore total=0, used=0, free=0 | |
2018-06-19T11:17:38.504-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/perf_event total=0, used=0, free=0 | |
2018-06-19T11:17:38.504-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/freezer total=0, used=0, free=0 | |
2018-06-19T11:17:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/memory total=0, used=0, free=0 | |
2018-06-19T11:17:38.505-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:38.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 366 | |
}, | |
"system": { | |
"memory": { | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1781460992, | |
"pct": 0.2172 | |
}, | |
"free": 6421266432, | |
"actual": { | |
"free": 7312359424, | |
"used": { | |
"pct": 0.1085, | |
"bytes": 890368000 | |
} | |
} | |
} | |
} | |
} | |
2018-06-19T11:17:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/pids total=0, used=0, free=0 | |
2018-06-19T11:17:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/cpu,cpuacct total=0, used=0, free=0 | |
2018-06-19T11:17:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/blkio total=0, used=0, free=0 | |
2018-06-19T11:17:38.505-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:38.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 509 | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:17:38.505-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:38.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 895 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/net_cls,net_prio total=0, used=0, free=0 | |
2018-06-19T11:17:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/devices total=0, used=0, free=0 | |
2018-06-19T11:17:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/hugetlb total=0, used=0, free=0 | |
2018-06-19T11:17:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/cpuset total=0, used=0, free=0 | |
2018-06-19T11:17:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/config total=0, used=0, free=0 | |
2018-06-19T11:17:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: / total=18746441728, used=6683131904, free=12063309824 | |
2018-06-19T11:17:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/sys/fs/binfmt_misc total=0, used=0, free=0 | |
2018-06-19T11:17:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/mqueue total=0, used=0, free=0 | |
2018-06-19T11:17:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/hugepages total=0, used=0, free=0 | |
2018-06-19T11:17:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/debug total=0, used=0, free=0 | |
2018-06-19T11:17:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/fs/nfsd total=0, used=0, free=0 | |
2018-06-19T11:17:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /boot total=520794112, used=281665536, free=239128576 | |
2018-06-19T11:17:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /var/lib/nfs/rpc_pipefs total=0, used=0, free=0 | |
2018-06-19T11:17:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/sys/fs/binfmt_misc total=0, used=0, free=0 | |
2018-06-19T11:17:38.506-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run/user/42 total=820273152, used=12288, free=820260864 | |
2018-06-19T11:17:38.506-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run/user/0 total=820273152, used=0, free=820273152 | |
2018-06-19T11:17:38.506-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:38.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"fsstat": { | |
"total_files": 24833104, | |
"total_size": { | |
"free": 30255230976, | |
"used": 7041359872, | |
"total": 37296590848 | |
}, | |
"count": 31 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 2075, | |
"name": "fsstat" | |
} | |
} | |
2018-06-19T11:17:38.506-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:38.505Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 720 | |
}, | |
"system": { | |
"filesystem": { | |
"files": 18317312, | |
"used": { | |
"pct": 0.3565, | |
"bytes": 6683131904 | |
}, | |
"type": "rootfs", | |
"mount_point": "/", | |
"free": 12063309824, | |
"free_files": 18077680, | |
"device_name": "rootfs", | |
"available": 12063309824, | |
"total": 18746441728 | |
} | |
} | |
} | |
2018-06-19T11:17:38.506-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:38.505Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 966, | |
"name": "filesystem", | |
"module": "system" | |
}, | |
"system": { | |
"filesystem": { | |
"files": 1001309, | |
"free_files": 1000755, | |
"available": 4024893440, | |
"type": "tmpfs", | |
"device_name": "tmpfs", | |
"free": 4024893440, | |
"total": 4101361664, | |
"used": { | |
"pct": 0.0186, | |
"bytes": 76468224 | |
}, | |
"mount_point": "/run" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:38.506-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:38.505Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 1352 | |
}, | |
"system": { | |
"filesystem": { | |
"type": "xfs", | |
"available": 12063309824, | |
"files": 18317312, | |
"device_name": "/dev/mapper/rhel-root", | |
"free_files": 18077680, | |
"used": { | |
"pct": 0.3565, | |
"bytes": 6683131904 | |
}, | |
"free": 12063309824, | |
"mount_point": "/", | |
"total": 18746441728 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:38.507-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:38.505Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 1634 | |
}, | |
"system": { | |
"filesystem": { | |
"used": { | |
"pct": 0.5408, | |
"bytes": 281665536 | |
}, | |
"free": 239128576, | |
"free_files": 511656, | |
"type": "xfs", | |
"mount_point": "/boot", | |
"files": 512000, | |
"device_name": "/dev/sda1", | |
"total": 520794112, | |
"available": 239128576 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:38.507-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:38.505Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"filesystem": { | |
"type": "rpc_pipefs", | |
"device_name": "sunrpc", | |
"total": 0, | |
"files": 0, | |
"available": 0, | |
"mount_point": "/var/lib/nfs/rpc_pipefs", | |
"free": 0, | |
"free_files": 0, | |
"used": { | |
"pct": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 1641, | |
"name": "filesystem" | |
} | |
} | |
2018-06-19T11:17:38.507-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:38.505Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 1900 | |
}, | |
"system": { | |
"filesystem": { | |
"free": 820260864, | |
"available": 820260864, | |
"files": 1001309, | |
"device_name": "tmpfs", | |
"total": 820273152, | |
"free_files": 1001300, | |
"used": { | |
"pct": 0, | |
"bytes": 12288 | |
}, | |
"type": "tmpfs", | |
"mount_point": "/run/user/42" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:17:38.507-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:38.505Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 1905 | |
}, | |
"system": { | |
"filesystem": { | |
"total": 820273152, | |
"type": "tmpfs", | |
"free": 820273152, | |
"used": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"device_name": "tmpfs", | |
"mount_point": "/run/user/0", | |
"files": 1001309, | |
"free_files": 1001308, | |
"available": 820273152 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:38.579-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:38.546Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 33331, | |
"namespace": "system.process.summary", | |
"name": "process_summary", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"total": 190, | |
"sleeping": 190, | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0 | |
} | |
} | |
} | |
} | |
2018-06-19T11:17:38.726-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 8 processes | |
2018-06-19T11:17:38.727-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:38.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 92971 | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 7, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"ppid": 1, | |
"pid": 31324, | |
"state": "sleeping", | |
"cwd": "/", | |
"memory": { | |
"size": 558006272, | |
"rss": { | |
"bytes": 26087424, | |
"pct": 0.0032 | |
}, | |
"share": 13762560 | |
}, | |
"cpu": { | |
"total": { | |
"value": 1290, | |
"pct": 0.017, | |
"norm": { | |
"pct": 0.0043 | |
} | |
}, | |
"start_time": "2018-06-19T18:16:38.000Z" | |
}, | |
"pgid": 31324, | |
"name": "metricbeat", | |
"username": "root", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat" | |
} | |
} | |
} | |
2018-06-19T11:17:38.727-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:38.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 93008 | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"total": { | |
"value": 1.27163e+06, | |
"pct": 0.003, | |
"norm": { | |
"pct": 0.0008 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"fd": { | |
"open": 11, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"pid": 1168, | |
"cwd": "/", | |
"pgid": 1168, | |
"name": "python", | |
"ppid": 1, | |
"state": "sleeping", | |
"username": "root", | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136 | |
}, | |
"cmdline": "python /usr/bin/goferd --foreground" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:17:38.728-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:38.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"pgid": 1171, | |
"name": "xymond", | |
"pid": 1319, | |
"cpu": { | |
"total": { | |
"value": 692990, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"cwd": "/", | |
"state": "sleeping", | |
"username": "xymon", | |
"fd": { | |
"open": 4, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 1171, | |
"memory": { | |
"size": 51286016, | |
"rss": { | |
"bytes": 8130560, | |
"pct": 0.001 | |
}, | |
"share": 2699264 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 93015, | |
"name": "process" | |
} | |
} | |
2018-06-19T11:17:38.728-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:38.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 93377 | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 4 | |
}, | |
"pid": 1553, | |
"name": "xymond_channel", | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"value": 115850, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:39.000Z" | |
}, | |
"state": "sleeping", | |
"memory": { | |
"share": 1662976, | |
"size": 42065920, | |
"rss": { | |
"pct": 0.0003, | |
"bytes": 2461696 | |
} | |
}, | |
"pgid": 1171, | |
"username": "xymon", | |
"cmdline": "xymond_channel --channel=status xymond_rrd --rrddir=/var/lib/xymon/rrd", | |
"ppid": 1171 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:38.728-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:38.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 93601 | |
}, | |
"system": { | |
"process": { | |
"username": "apache", | |
"ppid": 1180, | |
"fd": { | |
"open": 8, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 1180, | |
"name": "httpd", | |
"cwd": "/", | |
"pid": 23453, | |
"state": "sleeping", | |
"memory": { | |
"size": 229515264, | |
"rss": { | |
"bytes": 3952640, | |
"pct": 0.0005 | |
}, | |
"share": 1937408 | |
}, | |
"cmdline": "/usr/sbin/httpd -DFOREGROUND", | |
"cpu": { | |
"total": { | |
"value": 330, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
}, | |
"start_time": "2018-06-18T10:23:01.000Z" | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:17:38.728-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:38.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 93609 | |
}, | |
"system": { | |
"process": { | |
"name": "gnome-shell", | |
"cwd": "/var/lib/gdm", | |
"username": "gdm", | |
"cmdline": "/usr/bin/gnome-shell", | |
"pid": 1714, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 36 | |
}, | |
"cpu": { | |
"total": { | |
"value": 202080, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"ppid": 1674, | |
"pgid": 1674, | |
"state": "sleeping", | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142921728, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:38.728-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:38.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 93772 | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"share": 23785472, | |
"size": 62988288, | |
"rss": { | |
"bytes": 24182784, | |
"pct": 0.0029 | |
} | |
}, | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"ppid": 1, | |
"name": "systemd-journal", | |
"state": "sleeping", | |
"username": "root", | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"pgid": 509, | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"value": 45880, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"pid": 509 | |
} | |
} | |
} | |
2018-06-19T11:17:38.728-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:38.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 93921, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"username": "root", | |
"memory": { | |
"size": 302505984, | |
"rss": { | |
"bytes": 21835776, | |
"pct": 0.0027 | |
}, | |
"share": 8269824 | |
}, | |
"cmdline": "/usr/bin/python /usr/libexec/rhsmd", | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 240 | |
}, | |
"start_time": "2018-06-16T14:48:53.000Z" | |
}, | |
"pid": 7713, | |
"state": "sleeping", | |
"fd": { | |
"limit": { | |
"soft": 2144, | |
"hard": 2144 | |
}, | |
"open": 8 | |
}, | |
"ppid": 1, | |
"pgid": 716, | |
"name": "rhsmd", | |
"cwd": "/" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:39.507-0700 DEBUG [logstash] logstash/async.go:142 24 events out of 24 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T11:17:48.503-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:48.502Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"load": { | |
"5": 0.01, | |
"15": 0.05, | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
}, | |
"cores": 4, | |
"1": 0 | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
}, | |
"metricset": { | |
"rtt": 179, | |
"name": "load", | |
"module": "system" | |
} | |
} | |
2018-06-19T11:17:48.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:48.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"cpu": { | |
"cores": 4, | |
"iowait": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.013 | |
}, | |
"system": { | |
"pct": 0.01 | |
}, | |
"idle": { | |
"pct": 3.977 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.023 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"steal": { | |
"pct": 0 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 220 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:48.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:48.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 343, | |
"name": "memory" | |
}, | |
"system": { | |
"memory": { | |
"free": 6421254144, | |
"actual": { | |
"used": { | |
"pct": 0.1085, | |
"bytes": 890351616 | |
}, | |
"free": 7312375808 | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"free": 2147479552 | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1781473280, | |
"pct": 0.2172 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:48.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:48.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"packets": 34082485, | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8826740612 | |
}, | |
"out": { | |
"bytes": 1544055739, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13644689 | |
} | |
} | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 202, | |
"name": "network" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:48.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:48.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6610999166, | |
"packets": 1711812 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1711812, | |
"bytes": 6610999166 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 428, | |
"name": "network" | |
} | |
} | |
2018-06-19T11:17:48.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:48.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 439, | |
"name": "network", | |
"module": "system" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:48.505-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:48.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 686 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:48.590-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:48.546Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 43588, | |
"namespace": "system.process.summary", | |
"name": "process_summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"zombie": 0, | |
"unknown": 0, | |
"total": 190, | |
"sleeping": 188, | |
"running": 2, | |
"idle": 0, | |
"stopped": 0 | |
} | |
} | |
} | |
} | |
2018-06-19T11:17:48.744-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 8 processes | |
2018-06-19T11:17:48.746-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:48.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"username": "root", | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"ppid": 1, | |
"cwd": "/", | |
"cpu": { | |
"start_time": "2018-06-19T18:16:38.000Z", | |
"total": { | |
"norm": { | |
"pct": 0.0047 | |
}, | |
"value": 1480, | |
"pct": 0.019 | |
} | |
}, | |
"fd": { | |
"open": 7, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 31324, | |
"pid": 31324, | |
"name": "metricbeat", | |
"memory": { | |
"share": 13762560, | |
"size": 558006272, | |
"rss": { | |
"pct": 0.0032, | |
"bytes": 26099712 | |
} | |
} | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 111749 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:48.746-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:48.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 111785 | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"cpu": { | |
"total": { | |
"value": 1.27165e+06, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"ppid": 1, | |
"username": "root", | |
"state": "sleeping", | |
"cwd": "/", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"pid": 1168, | |
"pgid": 1168, | |
"name": "python", | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"pct": 0.0062, | |
"bytes": 51044352 | |
}, | |
"share": 11227136 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:48.746-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:48.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 111791 | |
}, | |
"system": { | |
"process": { | |
"pgid": 704, | |
"name": "graylog-collect", | |
"state": "sleeping", | |
"username": "root", | |
"cwd": "/", | |
"cpu": { | |
"start_time": "2018-06-12T23:29:12.000Z", | |
"total": { | |
"value": 278300, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0002 | |
} | |
} | |
}, | |
"fd": { | |
"open": 8, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"cmdline": "/usr/bin/graylog-collector-sidecar", | |
"pid": 704, | |
"ppid": 1, | |
"memory": { | |
"size": 373985280, | |
"rss": { | |
"bytes": 10014720, | |
"pct": 0.0012 | |
}, | |
"share": 4067328 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:48.746-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:48.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 112117, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"pgid": 29506, | |
"ppid": 1172, | |
"cmdline": "sshd: root@pts/1 ", | |
"pid": 29506, | |
"username": "root", | |
"memory": { | |
"share": 4997120, | |
"size": 158511104, | |
"rss": { | |
"bytes": 6496256, | |
"pct": 0.0008 | |
} | |
}, | |
"name": "sshd", | |
"state": "sleeping", | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0002 | |
}, | |
"value": 230 | |
}, | |
"start_time": "2018-06-19T18:00:41.000Z" | |
}, | |
"fd": { | |
"open": 13, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:48.747-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:48.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"rss": { | |
"bytes": 8130560, | |
"pct": 0.001 | |
}, | |
"share": 2699264, | |
"size": 51286016 | |
}, | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"cwd": "/", | |
"ppid": 1171, | |
"pgid": 1171, | |
"username": "xymon", | |
"name": "xymond", | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0002 | |
}, | |
"value": 693000 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"fd": { | |
"open": 4, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"pid": 1319 | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 112150 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:48.747-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:48.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 112332 | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142921728, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"cpu": { | |
"start_time": "2018-06-12T23:29:50.000Z", | |
"total": { | |
"value": 202080, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
} | |
}, | |
"pid": 1714, | |
"name": "gnome-shell", | |
"state": "sleeping", | |
"username": "gdm", | |
"ppid": 1674, | |
"cmdline": "/usr/bin/gnome-shell", | |
"cwd": "/var/lib/gdm", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 36 | |
}, | |
"pgid": 1674 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:48.747-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:48.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 112493 | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 24182784, | |
"pct": 0.0029 | |
}, | |
"share": 23785472 | |
}, | |
"ppid": 1, | |
"name": "systemd-journal", | |
"state": "sleeping", | |
"username": "root", | |
"pgid": 509, | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 45880 | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"pid": 509 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:48.747-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:48.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 112679 | |
}, | |
"system": { | |
"process": { | |
"pid": 7713, | |
"fd": { | |
"open": 8, | |
"limit": { | |
"hard": 2144, | |
"soft": 2144 | |
} | |
}, | |
"pgid": 716, | |
"state": "sleeping", | |
"memory": { | |
"size": 302505984, | |
"rss": { | |
"pct": 0.0027, | |
"bytes": 21835776 | |
}, | |
"share": 8269824 | |
}, | |
"cmdline": "/usr/bin/python /usr/libexec/rhsmd", | |
"cpu": { | |
"total": { | |
"value": 240, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-16T14:48:53.000Z" | |
}, | |
"ppid": 1, | |
"name": "rhsmd", | |
"username": "root", | |
"cwd": "/" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:49.505-0700 DEBUG [logstash] logstash/async.go:142 16 events out of 16 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T11:17:58.503-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:58.502Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 194 | |
}, | |
"system": { | |
"load": { | |
"5": 0.01, | |
"15": 0.05, | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
}, | |
"cores": 4, | |
"1": 0 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:58.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:58.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 126, | |
"name": "cpu" | |
}, | |
"system": { | |
"cpu": { | |
"steal": { | |
"pct": 0 | |
}, | |
"system": { | |
"pct": 0.012 | |
}, | |
"total": { | |
"pct": 0.026 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.013 | |
}, | |
"idle": { | |
"pct": 3.974 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0.001 | |
}, | |
"cores": 4 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:58.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:58.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 263, | |
"name": "memory" | |
}, | |
"system": { | |
"memory": { | |
"used": { | |
"bytes": 1781506048, | |
"pct": 0.2172 | |
}, | |
"free": 6421221376, | |
"actual": { | |
"free": 7312355328, | |
"used": { | |
"bytes": 890372096, | |
"pct": 0.1085 | |
} | |
}, | |
"swap": { | |
"free": 2147479552, | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
} | |
}, | |
"total": 8202727424 | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:17:58.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:58.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"packets": 34082793, | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8826886885 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13644790, | |
"bytes": 1544083027 | |
}, | |
"name": "ens192" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 178, | |
"name": "network", | |
"module": "system" | |
} | |
} | |
2018-06-19T11:17:58.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:58.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6611103694, | |
"packets": 1711827 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 1711827, | |
"bytes": 6611103694, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
}, | |
"metricset": { | |
"rtt": 299, | |
"name": "network", | |
"module": "system" | |
} | |
} | |
2018-06-19T11:17:58.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:58.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 307 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0 | |
}, | |
"out": { | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:58.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:58.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 434, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:58.578-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:58.546Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 31634, | |
"namespace": "system.process.summary", | |
"name": "process_summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 190, | |
"sleeping": 190, | |
"running": 0, | |
"idle": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:58.734-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 8 processes | |
2018-06-19T11:17:58.736-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:58.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 101619, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"pgid": 31324, | |
"pid": 31324, | |
"state": "sleeping", | |
"username": "root", | |
"memory": { | |
"rss": { | |
"bytes": 26128384, | |
"pct": 0.0032 | |
}, | |
"share": 13770752, | |
"size": 558006272 | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"cwd": "/", | |
"ppid": 1, | |
"name": "metricbeat", | |
"cpu": { | |
"total": { | |
"value": 1650, | |
"pct": 0.017, | |
"norm": { | |
"pct": 0.0043 | |
} | |
}, | |
"start_time": "2018-06-19T18:16:38.000Z" | |
}, | |
"fd": { | |
"open": 7, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:58.736-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:58.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 101657, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"pct": 0.0062, | |
"bytes": 51044352 | |
}, | |
"share": 11227136 | |
}, | |
"cpu": { | |
"total": { | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
}, | |
"value": 1.27167e+06 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"cwd": "/", | |
"name": "python", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"pid": 1168, | |
"pgid": 1168, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 11 | |
}, | |
"ppid": 1, | |
"state": "sleeping", | |
"username": "root" | |
} | |
} | |
} | |
2018-06-19T11:17:58.736-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:58.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 101666 | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"cwd": "/", | |
"pid": 704, | |
"username": "root", | |
"fd": { | |
"open": 8, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 704, | |
"cpu": { | |
"total": { | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
}, | |
"value": 278310 | |
}, | |
"start_time": "2018-06-12T23:29:12.000Z" | |
}, | |
"name": "graylog-collect", | |
"cmdline": "/usr/bin/graylog-collector-sidecar", | |
"ppid": 1, | |
"memory": { | |
"rss": { | |
"pct": 0.0012, | |
"bytes": 10014720 | |
}, | |
"share": 4067328, | |
"size": 373985280 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:58.736-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:58.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 102058 | |
}, | |
"system": { | |
"process": { | |
"pid": 28928, | |
"state": "sleeping", | |
"username": "root", | |
"pgid": 0, | |
"memory": { | |
"size": 0, | |
"rss": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"share": 0 | |
}, | |
"name": "kworker/0:1", | |
"cpu": { | |
"total": { | |
"value": 180, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
}, | |
"start_time": "2018-06-19T17:55:19.000Z" | |
}, | |
"fd": { | |
"open": 0, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 2 | |
} | |
} | |
} | |
2018-06-19T11:17:58.737-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:58.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 102092 | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 4, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"memory": { | |
"size": 51286016, | |
"rss": { | |
"bytes": 8130560, | |
"pct": 0.001 | |
}, | |
"share": 2699264 | |
}, | |
"cwd": "/", | |
"cpu": { | |
"total": { | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
}, | |
"value": 693010 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"ppid": 1171, | |
"username": "xymon", | |
"pgid": 1171, | |
"name": "xymond", | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"pid": 1319, | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:17:58.737-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:58.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 102361 | |
}, | |
"system": { | |
"process": { | |
"state": "sleeping", | |
"username": "gdm", | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 1714, | |
"pgid": 1674, | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"pct": 0.0174, | |
"bytes": 142921728 | |
}, | |
"share": 48148480 | |
}, | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 202080, | |
"pct": 0 | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"cmdline": "/usr/bin/gnome-shell", | |
"cwd": "/var/lib/gdm", | |
"ppid": 1674, | |
"name": "gnome-shell" | |
} | |
} | |
} | |
2018-06-19T11:17:58.737-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:58.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"name": "systemd-journal", | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"cpu": { | |
"total": { | |
"value": 45880, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"ppid": 1, | |
"fd": { | |
"open": 52, | |
"limit": { | |
"hard": 16384, | |
"soft": 16384 | |
} | |
}, | |
"pid": 509, | |
"state": "sleeping", | |
"username": "root", | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 24182784, | |
"pct": 0.0029 | |
}, | |
"share": 23785472 | |
}, | |
"pgid": 509, | |
"cwd": "/" | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 102543 | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:17:58.737-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:17:58.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 102723, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"limit": { | |
"soft": 2144, | |
"hard": 2144 | |
}, | |
"open": 8 | |
}, | |
"ppid": 1, | |
"pgid": 716, | |
"name": "rhsmd", | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"value": 240, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-16T14:48:53.000Z" | |
}, | |
"username": "root", | |
"memory": { | |
"size": 302505984, | |
"rss": { | |
"bytes": 21835776, | |
"pct": 0.0027 | |
}, | |
"share": 8269824 | |
}, | |
"pid": 7713, | |
"cmdline": "/usr/bin/python /usr/libexec/rhsmd", | |
"cwd": "/" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:17:59.505-0700 DEBUG [logstash] logstash/async.go:142 16 events out of 16 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T11:18:08.502-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":730,"time":736},"total":{"ticks":1660,"time":1670,"value":1660},"user":{"ticks":930,"time":934}},"info":{"ephemeral_id":"aabad21d-7d4e-4b1c-9da6-f5dbd3f9f1b3","uptime":{"ms":90058}},"memstats":{"gc_next":7296736,"memory_alloc":3667248,"memory_total":141885176,"rss":180224}},"libbeat":{"config":{"module":{"running":3}},"output":{"events":{"acked":56,"batches":3,"total":56},"read":{"bytes":18},"write":{"bytes":7522}},"pipeline":{"clients":6,"events":{"active":0,"filtered":26,"published":56,"total":82},"queue":{"acked":56}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"filesystem":{"events":33,"success":33},"fsstat":{"events":1,"success":1},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":24,"success":24},"process_summary":{"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-19T11:18:08.503-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:08.502Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"load": { | |
"5": 0.01, | |
"15": 0.05, | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
}, | |
"cores": 4, | |
"1": 0 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 109 | |
} | |
} | |
2018-06-19T11:18:08.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:08.503Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 252, | |
"name": "memory", | |
"module": "system" | |
}, | |
"system": { | |
"memory": { | |
"free": 6421188608, | |
"actual": { | |
"free": 7312338944, | |
"used": { | |
"bytes": 890388480, | |
"pct": 0.1085 | |
} | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1781538816, | |
"pct": 0.2172 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:08.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:08.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"cpu": { | |
"irq": { | |
"pct": 0 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.023 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"cores": 4, | |
"system": { | |
"pct": 0.01 | |
}, | |
"idle": { | |
"pct": 3.977 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.013 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 149 | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:08.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:08.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"packets": 34083120, | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8826912182 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 13644821, | |
"bytes": 1544106644, | |
"errors": 0 | |
} | |
} | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 227, | |
"name": "network" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:08.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:08.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 238 | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"packets": 1711827, | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6611103694 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1711827, | |
"bytes": 6611103694 | |
}, | |
"name": "lo" | |
} | |
} | |
} | |
2018-06-19T11:18:08.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:08.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 477, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:08.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:08.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 484 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:18:08.584-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:08.546Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 38021, | |
"namespace": "system.process.summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"unknown": 0, | |
"total": 190, | |
"sleeping": 190, | |
"running": 0, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:08.728-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 7 processes | |
2018-06-19T11:18:08.730-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:08.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 95280 | |
}, | |
"system": { | |
"process": { | |
"name": "metricbeat", | |
"cpu": { | |
"total": { | |
"value": 1810, | |
"pct": 0.016, | |
"norm": { | |
"pct": 0.004 | |
} | |
}, | |
"start_time": "2018-06-19T18:16:38.000Z" | |
}, | |
"memory": { | |
"size": 558006272, | |
"rss": { | |
"bytes": 26157056, | |
"pct": 0.0032 | |
}, | |
"share": 13783040 | |
}, | |
"cwd": "/", | |
"pid": 31324, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"pgid": 31324, | |
"state": "sleeping", | |
"fd": { | |
"open": 7, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 1, | |
"username": "root" | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:18:08.730-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:08.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 95311, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"pid": 1168, | |
"ppid": 1, | |
"name": "python", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"cwd": "/", | |
"state": "sleeping", | |
"username": "root", | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"pct": 0.0062, | |
"bytes": 51044352 | |
}, | |
"share": 11227136 | |
}, | |
"cpu": { | |
"total": { | |
"value": 1.2717e+06, | |
"pct": 0.003, | |
"norm": { | |
"pct": 0.0008 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 1168 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:08.730-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:08.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 95320 | |
}, | |
"system": { | |
"process": { | |
"name": "vmtoolsd", | |
"fd": { | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
}, | |
"open": 8 | |
}, | |
"cmdline": "/usr/bin/vmtoolsd", | |
"memory": { | |
"share": 4878336, | |
"size": 312348672, | |
"rss": { | |
"bytes": 6344704, | |
"pct": 0.0008 | |
} | |
}, | |
"pid": 747, | |
"pgid": 747, | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"value": 612460, | |
"pct": 0.002, | |
"norm": { | |
"pct": 0.0005 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:16.000Z" | |
}, | |
"cwd": "/", | |
"username": "root", | |
"ppid": 1 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:08.730-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:08.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 95693 | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 0 | |
}, | |
"name": "xfsaild/dm-0", | |
"pgid": 0, | |
"cwd": "/", | |
"pid": 428, | |
"state": "sleeping", | |
"username": "root", | |
"memory": { | |
"rss": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"share": 0, | |
"size": 0 | |
}, | |
"cpu": { | |
"total": { | |
"value": 222470, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
}, | |
"start_time": "2018-06-12T23:28:53.000Z" | |
}, | |
"ppid": 2 | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:18:08.730-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:08.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 95803, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"name": "gnome-shell", | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142921728, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"cwd": "/var/lib/gdm", | |
"pid": 1714, | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0003 | |
}, | |
"value": 202090, | |
"pct": 0.001 | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"ppid": 1674, | |
"cmdline": "/usr/bin/gnome-shell", | |
"fd": { | |
"open": 36, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"pgid": 1674, | |
"state": "sleeping", | |
"username": "gdm" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:08.730-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:08.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 95852 | |
}, | |
"system": { | |
"process": { | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"pid": 509, | |
"pgid": 509, | |
"name": "systemd-journal", | |
"state": "sleeping", | |
"memory": { | |
"share": 23785472, | |
"size": 62988288, | |
"rss": { | |
"pct": 0.0029, | |
"bytes": 24182784 | |
} | |
}, | |
"cpu": { | |
"total": { | |
"value": 45880, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"username": "root", | |
"ppid": 1, | |
"fd": { | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
}, | |
"open": 52 | |
}, | |
"cwd": "/" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:08.730-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:08.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 96022 | |
}, | |
"system": { | |
"process": { | |
"cwd": "/", | |
"pgid": 716, | |
"state": "sleeping", | |
"memory": { | |
"share": 8269824, | |
"size": 302505984, | |
"rss": { | |
"bytes": 21835776, | |
"pct": 0.0027 | |
} | |
}, | |
"username": "root", | |
"cpu": { | |
"total": { | |
"value": 240, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-16T14:48:53.000Z" | |
}, | |
"fd": { | |
"open": 8, | |
"limit": { | |
"soft": 2144, | |
"hard": 2144 | |
} | |
}, | |
"cmdline": "/usr/bin/python /usr/libexec/rhsmd", | |
"pid": 7713, | |
"ppid": 1, | |
"name": "rhsmd" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:09.505-0700 DEBUG [logstash] logstash/async.go:142 15 events out of 15 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T11:18:18.503-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:18.502Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "load", | |
"module": "system", | |
"rtt": 181 | |
}, | |
"system": { | |
"load": { | |
"norm": { | |
"1": 0, | |
"5": 0.0025, | |
"15": 0.0125 | |
}, | |
"cores": 4, | |
"1": 0, | |
"5": 0.01, | |
"15": 0.05 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:18.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:18.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 168 | |
}, | |
"system": { | |
"cpu": { | |
"idle": { | |
"pct": 3.974 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"system": { | |
"pct": 0.013 | |
}, | |
"iowait": { | |
"pct": 0 | |
}, | |
"softirq": { | |
"pct": 0 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"cores": 4, | |
"user": { | |
"pct": 0.013 | |
}, | |
"total": { | |
"pct": 0.026 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:18.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:18.503Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 358 | |
}, | |
"system": { | |
"memory": { | |
"total": 8202727424, | |
"used": { | |
"bytes": 1781764096, | |
"pct": 0.2172 | |
}, | |
"free": 6420963328, | |
"actual": { | |
"free": 7312130048, | |
"used": { | |
"pct": 0.1086, | |
"bytes": 890597376 | |
} | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"pct": 0, | |
"bytes": 0 | |
}, | |
"free": 2147479552 | |
} | |
} | |
} | |
} | |
2018-06-19T11:18:18.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:18.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 238, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "ens192", | |
"in": { | |
"bytes": 8826929578, | |
"packets": 34083330, | |
"errors": 0, | |
"dropped": 1698 | |
}, | |
"out": { | |
"bytes": 1544127460, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13644852 | |
} | |
} | |
} | |
} | |
2018-06-19T11:18:18.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:18.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 571 | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"packets": 1711827, | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6611103694 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 1711827, | |
"bytes": 6611103694, | |
"errors": 0 | |
} | |
} | |
} | |
} | |
2018-06-19T11:18:18.505-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:18.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 603 | |
} | |
} | |
2018-06-19T11:18:18.505-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:18.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 609 | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
}, | |
"name": "virbr0", | |
"in": { | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:18.577-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:18.546Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 30787, | |
"namespace": "system.process.summary" | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"running": 1, | |
"idle": 0, | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 190, | |
"sleeping": 189 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:18.725-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 8 processes | |
2018-06-19T11:18:18.727-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:18.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 92704, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"pid": 31324, | |
"username": "root", | |
"cpu": { | |
"total": { | |
"value": 1970, | |
"pct": 0.016, | |
"norm": { | |
"pct": 0.004 | |
} | |
}, | |
"start_time": "2018-06-19T18:16:38.000Z" | |
}, | |
"name": "metricbeat", | |
"state": "sleeping", | |
"cwd": "/", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 7 | |
}, | |
"pgid": 31324, | |
"memory": { | |
"size": 558006272, | |
"rss": { | |
"pct": 0.0032, | |
"bytes": 26165248 | |
}, | |
"share": 13783040 | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"ppid": 1 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:18.727-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:18.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"username": "root", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"cwd": "/", | |
"ppid": 1, | |
"pgid": 1168, | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 11 | |
}, | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"value": 1.27171e+06, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"pid": 1168, | |
"name": "python", | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"bytes": 51044352, | |
"pct": 0.0062 | |
}, | |
"share": 11227136 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 92735 | |
} | |
} | |
2018-06-19T11:18:18.727-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:18.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 92744 | |
}, | |
"system": { | |
"process": { | |
"pid": 1319, | |
"ppid": 1171, | |
"state": "sleeping", | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0.0003 | |
}, | |
"value": 693030, | |
"pct": 0.001 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
}, | |
"pgid": 1171, | |
"username": "xymon", | |
"cwd": "/", | |
"fd": { | |
"open": 4, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"name": "xymond", | |
"memory": { | |
"size": 51286016, | |
"rss": { | |
"pct": 0.001, | |
"bytes": 8130560 | |
}, | |
"share": 2699264 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:18.727-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:18.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 188430 | |
}, | |
"start_time": "2018-06-12T23:28:51.000Z" | |
}, | |
"pid": 1, | |
"cmdline": "/usr/lib/systemd/systemd --switched-root --system --deserialize 21", | |
"cwd": "/", | |
"ppid": 0, | |
"pgid": 1, | |
"name": "systemd", | |
"username": "root", | |
"state": "sleeping", | |
"memory": { | |
"size": 195588096, | |
"rss": { | |
"pct": 0.0005, | |
"bytes": 4194304 | |
}, | |
"share": 2605056 | |
}, | |
"fd": { | |
"open": 49, | |
"limit": { | |
"soft": 65536, | |
"hard": 65536 | |
} | |
} | |
} | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 93106, | |
"name": "process" | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:18:18.728-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:18.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 93118, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"start_time": "2018-06-12T23:28:51.000Z", | |
"total": { | |
"value": 1860, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
} | |
}, | |
"name": "migration/0", | |
"memory": { | |
"size": 0, | |
"rss": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"share": 0 | |
}, | |
"fd": { | |
"open": 0, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 7, | |
"ppid": 2, | |
"pgid": 0, | |
"username": "root", | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:18.728-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:18.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 93283, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"cmdline": "/usr/bin/gnome-shell", | |
"cwd": "/var/lib/gdm", | |
"pid": 1714, | |
"name": "gnome-shell", | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pgid": 1674, | |
"state": "sleeping", | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"pct": 0.0174, | |
"bytes": 142921728 | |
}, | |
"share": 48148480 | |
}, | |
"ppid": 1674, | |
"cpu": { | |
"total": { | |
"value": 202090, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"username": "gdm" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:18.728-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:18.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 93511 | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"total": { | |
"value": 45880, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
}, | |
"name": "systemd-journal", | |
"state": "sleeping", | |
"username": "root", | |
"ppid": 1, | |
"pgid": 509, | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"pid": 509, | |
"memory": { | |
"rss": { | |
"bytes": 24182784, | |
"pct": 0.0029 | |
}, | |
"share": 23785472, | |
"size": 62988288 | |
}, | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"cwd": "/" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:18.728-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:18.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 93518 | |
}, | |
"system": { | |
"process": { | |
"ppid": 1, | |
"memory": { | |
"share": 8269824, | |
"size": 302505984, | |
"rss": { | |
"bytes": 21835776, | |
"pct": 0.0027 | |
} | |
}, | |
"cmdline": "/usr/bin/python /usr/libexec/rhsmd", | |
"fd": { | |
"open": 8, | |
"limit": { | |
"soft": 2144, | |
"hard": 2144 | |
} | |
}, | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 240, | |
"pct": 0 | |
}, | |
"start_time": "2018-06-16T14:48:53.000Z" | |
}, | |
"pid": 7713, | |
"pgid": 716, | |
"name": "rhsmd", | |
"username": "root", | |
"cwd": "/" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:19.505-0700 DEBUG [logstash] logstash/async.go:142 16 events out of 16 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T11:18:28.503-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:28.502Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 251, | |
"name": "load", | |
"module": "system" | |
}, | |
"system": { | |
"load": { | |
"15": 0.05, | |
"norm": { | |
"5": 0.0025, | |
"15": 0.0125, | |
"1": 0 | |
}, | |
"cores": 4, | |
"1": 0, | |
"5": 0.01 | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:18:28.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:28.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 136 | |
}, | |
"system": { | |
"cpu": { | |
"softirq": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.026 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.013 | |
}, | |
"idle": { | |
"pct": 3.974 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"cores": 4, | |
"system": { | |
"pct": 0.013 | |
}, | |
"nice": { | |
"pct": 0 | |
}, | |
"iowait": { | |
"pct": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:28.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:28.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 186 | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13645150, | |
"bytes": 1544171230 | |
}, | |
"name": "ens192", | |
"in": { | |
"dropped": 1698, | |
"bytes": 8826987509, | |
"packets": 34084011, | |
"errors": 0 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:18:28.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:28.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 196, | |
"name": "network", | |
"module": "system" | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"dropped": 0, | |
"bytes": 6611167808, | |
"packets": 1711849, | |
"errors": 0 | |
}, | |
"out": { | |
"bytes": 6611167808, | |
"errors": 0, | |
"dropped": 0, | |
"packets": 1711849 | |
} | |
} | |
} | |
} | |
2018-06-19T11:18:28.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:28.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 419 | |
}, | |
"system": { | |
"memory": { | |
"actual": { | |
"free": 7309873152, | |
"used": { | |
"bytes": 892854272, | |
"pct": 0.1088 | |
} | |
}, | |
"swap": { | |
"free": 2147479552, | |
"total": 2147479552, | |
"used": { | |
"pct": 0, | |
"bytes": 0 | |
} | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1783988224, | |
"pct": 0.2175 | |
}, | |
"free": 6418739200 | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:18:28.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:28.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 387 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0-nic", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:28.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:28.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 399 | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 0, | |
"bytes": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:28.579-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:28.546Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"namespace": "system.process.summary", | |
"name": "process_summary", | |
"module": "system", | |
"rtt": 32329 | |
}, | |
"system": { | |
"process": { | |
"summary": { | |
"stopped": 0, | |
"zombie": 0, | |
"unknown": 0, | |
"total": 191, | |
"sleeping": 191, | |
"running": 0, | |
"idle": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:28.729-0700 DEBUG [processes] process/process.go:402 Filtered top processes down to 8 processes | |
2018-06-19T11:18:28.730-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:28.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"memory": { | |
"rss": { | |
"bytes": 26185728, | |
"pct": 0.0032 | |
}, | |
"share": 13791232, | |
"size": 558006272 | |
}, | |
"pid": 31324, | |
"pgid": 31324, | |
"name": "metricbeat", | |
"state": "sleeping", | |
"username": "root", | |
"cpu": { | |
"total": { | |
"pct": 0.016, | |
"norm": { | |
"pct": 0.004 | |
}, | |
"value": 2130 | |
}, | |
"start_time": "2018-06-19T18:16:38.000Z" | |
}, | |
"fd": { | |
"open": 7, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"cmdline": "/usr/share/metricbeat/bin/metricbeat -c /etc/metricbeat/metricbeat.yml -path.home /usr/share/metricbeat -path.config /etc/metricbeat -path.data /var/lib/metricbeat -path.logs /var/log/metricbeat", | |
"cwd": "/", | |
"ppid": 1 | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 95858 | |
} | |
} | |
2018-06-19T11:18:28.730-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:28.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 95901, | |
"name": "process", | |
"module": "system" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"username": "root", | |
"cwd": "/", | |
"cmdline": "python /usr/bin/goferd --foreground", | |
"cpu": { | |
"start_time": "2018-06-12T23:29:34.000Z", | |
"total": { | |
"pct": 0.003, | |
"norm": { | |
"pct": 0.0007 | |
}, | |
"value": 1.27174e+06 | |
} | |
}, | |
"fd": { | |
"open": 11, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"pid": 1168, | |
"ppid": 1, | |
"state": "sleeping", | |
"pgid": 1168, | |
"name": "python", | |
"memory": { | |
"size": 1634631680, | |
"rss": { | |
"pct": 0.0062, | |
"bytes": 51044352 | |
}, | |
"share": 11227136 | |
} | |
} | |
} | |
} | |
2018-06-19T11:18:28.730-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:28.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 95908 | |
}, | |
"system": { | |
"process": { | |
"cwd": "/", | |
"pid": 1, | |
"pgid": 1, | |
"name": "systemd", | |
"memory": { | |
"size": 195588096, | |
"rss": { | |
"bytes": 4194304, | |
"pct": 0.0005 | |
}, | |
"share": 2605056 | |
}, | |
"cmdline": "/usr/lib/systemd/systemd --switched-root --system --deserialize 21", | |
"fd": { | |
"open": 49, | |
"limit": { | |
"hard": 65536, | |
"soft": 65536 | |
} | |
}, | |
"cpu": { | |
"total": { | |
"value": 188440, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0003 | |
} | |
}, | |
"start_time": "2018-06-12T23:28:51.000Z" | |
}, | |
"ppid": 0, | |
"state": "sleeping", | |
"username": "root" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:18:28.731-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:28.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 96298 | |
}, | |
"system": { | |
"process": { | |
"cmdline": "xymond --restart=/var/lib/xymon/tmp/xymond.chk --checkpoint-file=/var/lib/xymon/tmp/xymond.chk --checkpoint-interval=600 --admin-senders=127.0.0.1,162.70.26.89 --store-clientlogs=!msgs", | |
"pgid": 1171, | |
"memory": { | |
"size": 51286016, | |
"rss": { | |
"bytes": 8130560, | |
"pct": 0.001 | |
}, | |
"share": 2699264 | |
}, | |
"cwd": "/", | |
"fd": { | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
}, | |
"open": 4 | |
}, | |
"pid": 1319, | |
"name": "xymond", | |
"state": "sleeping", | |
"ppid": 1171, | |
"username": "xymon", | |
"cpu": { | |
"total": { | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0002 | |
}, | |
"value": 693040 | |
}, | |
"start_time": "2018-06-12T23:29:34.000Z" | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:28.731-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:28.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 96312, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"cpu": { | |
"total": { | |
"value": 278320, | |
"pct": 0.001, | |
"norm": { | |
"pct": 0.0002 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:12.000Z" | |
}, | |
"pid": 704, | |
"pgid": 704, | |
"username": "root", | |
"fd": { | |
"open": 8, | |
"limit": { | |
"hard": 4096, | |
"soft": 1024 | |
} | |
}, | |
"memory": { | |
"size": 373985280, | |
"rss": { | |
"bytes": 10014720, | |
"pct": 0.0012 | |
}, | |
"share": 4067328 | |
}, | |
"cwd": "/", | |
"ppid": 1, | |
"cmdline": "/usr/bin/graylog-collector-sidecar", | |
"name": "graylog-collect", | |
"state": "sleeping" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:28.731-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:28.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"process": { | |
"fd": { | |
"open": 36, | |
"limit": { | |
"soft": 1024, | |
"hard": 4096 | |
} | |
}, | |
"ppid": 1674, | |
"state": "sleeping", | |
"memory": { | |
"size": 2004910080, | |
"rss": { | |
"bytes": 142921728, | |
"pct": 0.0174 | |
}, | |
"share": 48148480 | |
}, | |
"pgid": 1674, | |
"cwd": "/var/lib/gdm", | |
"pid": 1714, | |
"username": "gdm", | |
"cpu": { | |
"total": { | |
"value": 202090, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-12T23:29:50.000Z" | |
}, | |
"name": "gnome-shell", | |
"cmdline": "/usr/bin/gnome-shell" | |
} | |
}, | |
"metricset": { | |
"name": "process", | |
"module": "system", | |
"rtt": 96576 | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:18:28.731-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:28.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"rtt": 96584, | |
"name": "process", | |
"module": "system" | |
}, | |
"system": { | |
"process": { | |
"name": "systemd-journal", | |
"state": "sleeping", | |
"memory": { | |
"size": 62988288, | |
"rss": { | |
"bytes": 24186880, | |
"pct": 0.0029 | |
}, | |
"share": 23789568 | |
}, | |
"cmdline": "/usr/lib/systemd/systemd-journald", | |
"username": "root", | |
"cwd": "/", | |
"fd": { | |
"open": 52, | |
"limit": { | |
"soft": 16384, | |
"hard": 16384 | |
} | |
}, | |
"pid": 509, | |
"ppid": 1, | |
"pgid": 509, | |
"cpu": { | |
"total": { | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
}, | |
"value": 45880 | |
}, | |
"start_time": "2018-06-12T23:29:04.000Z" | |
} | |
} | |
} | |
} | |
2018-06-19T11:18:28.731-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:28.634Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 96811, | |
"name": "process" | |
}, | |
"system": { | |
"process": { | |
"pgid": 716, | |
"fd": { | |
"open": 8, | |
"limit": { | |
"soft": 2144, | |
"hard": 2144 | |
} | |
}, | |
"pid": 7713, | |
"cmdline": "/usr/bin/python /usr/libexec/rhsmd", | |
"ppid": 1, | |
"state": "sleeping", | |
"cpu": { | |
"total": { | |
"value": 240, | |
"pct": 0, | |
"norm": { | |
"pct": 0 | |
} | |
}, | |
"start_time": "2018-06-16T14:48:53.000Z" | |
}, | |
"username": "root", | |
"memory": { | |
"size": 302505984, | |
"rss": { | |
"bytes": 21835776, | |
"pct": 0.0027 | |
}, | |
"share": 8269824 | |
}, | |
"cwd": "/", | |
"name": "rhsmd" | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:29.506-0700 DEBUG [logstash] logstash/async.go:142 16 events out of 16 events sent to logstash host 162.70.27.206:15043. Continue sending | |
2018-06-19T11:18:38.503-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:38.502Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 123, | |
"name": "load" | |
}, | |
"system": { | |
"load": { | |
"norm": { | |
"5": 0.0025, | |
"15": 0.0125, | |
"1": 0 | |
}, | |
"cores": 4, | |
"1": 0, | |
"5": 0.01, | |
"15": 0.05 | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:18:38.502-0700 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":960,"time":967},"total":{"ticks":2140,"time":2155,"value":2140},"user":{"ticks":1180,"time":1188}},"info":{"ephemeral_id":"aabad21d-7d4e-4b1c-9da6-f5dbd3f9f1b3","uptime":{"ms":120058}},"memstats":{"gc_next":7294720,"memory_alloc":3677088,"memory_total":186730144,"rss":57344}},"libbeat":{"config":{"module":{"running":3}},"output":{"events":{"acked":47,"batches":3,"total":47},"read":{"bytes":18},"write":{"bytes":6603}},"pipeline":{"clients":6,"events":{"active":0,"published":47,"total":47},"queue":{"acked":47}}},"metricbeat":{"system":{"cpu":{"events":3,"success":3},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":12,"success":12},"process":{"events":23,"success":23},"process_summary":{"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}} | |
2018-06-19T11:18:38.504-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: / total=18746441728, used=6683013120, free=12063428608 | |
2018-06-19T11:18:38.504-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys total=0, used=0, free=0 | |
2018-06-19T11:18:38.504-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc total=0, used=0, free=0 | |
2018-06-19T11:18:38.504-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev total=4084723712, used=0, free=4084723712 | |
2018-06-19T11:18:38.504-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/security total=0, used=0, free=0 | |
2018-06-19T11:18:38.504-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/shm total=4101361664, used=81920, free=4101279744 | |
2018-06-19T11:18:38.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:38.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "cpu", | |
"module": "system", | |
"rtt": 132 | |
}, | |
"system": { | |
"cpu": { | |
"nice": { | |
"pct": 0 | |
}, | |
"user": { | |
"pct": 0.016 | |
}, | |
"system": { | |
"pct": 0.018 | |
}, | |
"irq": { | |
"pct": 0 | |
}, | |
"idle": { | |
"pct": 3.9629 | |
}, | |
"iowait": { | |
"pct": 0.002 | |
}, | |
"softirq": { | |
"pct": 0.001 | |
}, | |
"steal": { | |
"pct": 0 | |
}, | |
"total": { | |
"pct": 0.0371 | |
}, | |
"cores": 4 | |
} | |
} | |
} | |
2018-06-19T11:18:38.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:38.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 165 | |
}, | |
"system": { | |
"network": { | |
"out": { | |
"errors": 0, | |
"dropped": 0, | |
"packets": 13645923, | |
"bytes": 1544252570 | |
}, | |
"name": "ens192", | |
"in": { | |
"packets": 34084768, | |
"errors": 0, | |
"dropped": 1698, | |
"bytes": 8827109621 | |
} | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:18:38.504-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/pts total=0, used=0, free=0 | |
2018-06-19T11:18:38.504-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run total=4101361664, used=76468224, free=4024893440 | |
2018-06-19T11:18:38.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:38.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
}, | |
"system": { | |
"network": { | |
"name": "lo", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 6611232247, | |
"packets": 1711913 | |
}, | |
"out": { | |
"dropped": 0, | |
"packets": 1711913, | |
"bytes": 6611232247, | |
"errors": 0 | |
} | |
} | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 173 | |
} | |
} | |
2018-06-19T11:18:38.504-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup total=4101361664, used=0, free=4101361664 | |
2018-06-19T11:18:38.504-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:38.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "memory", | |
"module": "system", | |
"rtt": 348 | |
}, | |
"system": { | |
"memory": { | |
"free": 6420639744, | |
"actual": { | |
"free": 7311847424, | |
"used": { | |
"pct": 0.1086, | |
"bytes": 890880000 | |
} | |
}, | |
"swap": { | |
"total": 2147479552, | |
"used": { | |
"bytes": 0, | |
"pct": 0 | |
}, | |
"free": 2147479552 | |
}, | |
"total": 8202727424, | |
"used": { | |
"bytes": 1782087680, | |
"pct": 0.2173 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:38.505-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:38.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "network", | |
"module": "system", | |
"rtt": 573 | |
}, | |
"system": { | |
"network": { | |
"in": { | |
"bytes": 0, | |
"packets": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"out": { | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0 | |
}, | |
"name": "virbr0-nic" | |
} | |
}, | |
"beat": { | |
"hostname": "lin-play-02", | |
"version": "6.2.4", | |
"name": "lin-play-02" | |
} | |
} | |
2018-06-19T11:18:38.504-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/systemd total=0, used=0, free=0 | |
2018-06-19T11:18:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/pstore total=0, used=0, free=0 | |
2018-06-19T11:18:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/perf_event total=0, used=0, free=0 | |
2018-06-19T11:18:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/freezer total=0, used=0, free=0 | |
2018-06-19T11:18:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/memory total=0, used=0, free=0 | |
2018-06-19T11:18:38.505-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:38.504Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 898, | |
"name": "network" | |
}, | |
"system": { | |
"network": { | |
"name": "virbr0", | |
"in": { | |
"errors": 0, | |
"dropped": 0, | |
"bytes": 0, | |
"packets": 0 | |
}, | |
"out": { | |
"packets": 0, | |
"bytes": 0, | |
"errors": 0, | |
"dropped": 0 | |
} | |
} | |
}, | |
"beat": { | |
"name": "lin-play-02", | |
"hostname": "lin-play-02", | |
"version": "6.2.4" | |
} | |
} | |
2018-06-19T11:18:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/pids total=0, used=0, free=0 | |
2018-06-19T11:18:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/cpu,cpuacct total=0, used=0, free=0 | |
2018-06-19T11:18:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/blkio total=0, used=0, free=0 | |
2018-06-19T11:18:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/net_cls,net_prio total=0, used=0, free=0 | |
2018-06-19T11:18:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/devices total=0, used=0, free=0 | |
2018-06-19T11:18:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/hugetlb total=0, used=0, free=0 | |
2018-06-19T11:18:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/fs/cgroup/cpuset total=0, used=0, free=0 | |
2018-06-19T11:18:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/config total=0, used=0, free=0 | |
2018-06-19T11:18:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: / total=18746441728, used=6683013120, free=12063428608 | |
2018-06-19T11:18:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/sys/fs/binfmt_misc total=0, used=0, free=0 | |
2018-06-19T11:18:38.505-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/mqueue total=0, used=0, free=0 | |
2018-06-19T11:18:38.506-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /dev/hugepages total=0, used=0, free=0 | |
2018-06-19T11:18:38.506-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /sys/kernel/debug total=0, used=0, free=0 | |
2018-06-19T11:18:38.506-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/fs/nfsd total=0, used=0, free=0 | |
2018-06-19T11:18:38.506-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /boot total=520794112, used=281665536, free=239128576 | |
2018-06-19T11:18:38.506-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /var/lib/nfs/rpc_pipefs total=0, used=0, free=0 | |
2018-06-19T11:18:38.506-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /proc/sys/fs/binfmt_misc total=0, used=0, free=0 | |
2018-06-19T11:18:38.506-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run/user/42 total=820273152, used=12288, free=820260864 | |
2018-06-19T11:18:38.506-0700 DEBUG [fsstat] fsstat/fsstat.go:64 filesystem: /run/user/0 total=820273152, used=0, free=820273152 | |
2018-06-19T11:18:38.506-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:38.505Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"name": "filesystem", | |
"module": "system", | |
"rtt": 685 | |
}, | |
"system": { | |
"filesystem": { | |
"used": { | |
"pct": 0.3565, | |
"bytes": 6683013120 | |
}, | |
"device_name": "rootfs", | |
"type": "rootfs", | |
"total": 18746441728, | |
"free": 12063428608, | |
"mount_point": "/", | |
"files": 18317312, | |
"available": 12063428608, | |
"free_files": 18077680 | |
} | |
}, | |
"beat": { | |
"version": "6.2.4", | |
"name": "lin-play-02", | |
"hostname": "lin-play-02" | |
} | |
} | |
2018-06-19T11:18:38.506-0700 DEBUG [publish] pipeline/processor.go:275 Publish event: { | |
"@timestamp": "2018-06-19T18:18:38.503Z", | |
"@metadata": { | |
"beat": "metricbeat", | |
"type": "doc", | |
"version": "6.2.4" | |
}, | |
"metricset": { | |
"module": "system", | |
"rtt": 2414, | |
"name": "fsstat" | |
}, | |
"system": { | |
"fsstat": { | |
"tot |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment