Search code examples
opensearchmetricbeatopensearch-dashboards

Issue with metricbeat data visualization in OpenSearch dashboards


Metricbeat sent some data through logstash into opensearch. After first hit I set proper Index Pattern to read incoming data:

system.cpu.pct Index Pattern

incoming datasets with system.cpu.pct

Everything looks fine until I want to create a vizualization (line chart or table) for this data: Line chart for system.cpu.pct

Looks like there is some issue with this data format (?), however I tried to set this parameter as well as number but got the same result. What more I have to set to get proper chart for this data?

  • I changed Index Pattern settings but nothing happend
  • I tried to use another similar property (system.cpu.system.pct) but got the same result

Solution

  • Okay, so the problem was automapping of that property. When I introduced a template before indices were created, the data looks fine.

    GET _index_template/metricbeats-template enter image description here

    GET metricbeat-7.10.0-2023.03.09/_mapping/field/host.cpu.pct

    enter image description here

    enter image description here