beats Event Processing Metrics
Stack
Winlogbeat exposes metrics under the HTTP monitoring endpoint. These metrics are exposed under the /inputs path. They can be used to observe the event log processing activity of Winlogbeat.
| Metric | Description |
|---|---|
provider | Name of the provider being read. |
received_events_total | Total number of events received. |
discarded_events_total | Total number of discarded events. |
errors_total | Total number of errors. |
received_events_count | Histogram of the number of events in each non-zero batch. |
source_lag_time | Histogram of the difference in nanoseconds between timestamped event’s creation and reading. |
batch_read_period | Histogram of the elapsed time in nanoseconds between non-zero batch reads. |