System Metrics for Ubuntu

First we need to install Metricbeat.

sudo apt-get install apt-transport-https
wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add -
echo "deb https://artifacts.elastic.co/packages/oss-6.x/apt stable main" | sudo tee -a /etc/apt/sources.list.d/elastic-6.x.list

sudo apt-get update && sudo apt-get install metricbeat

/etc/metricbeat/metricbeat.yml

We'll be shipping to Logstash so that we have the option to run filters before the data is indexed.
Comment out the elasticsearch output block.

## Comment out elasticsearch output
#output.elasticsearch:
#  hosts: ["localhost:9200"]

Uncomment and change the logstash output to match below.

output.logstash:
    hosts: ["your-logstash-host:your-port"]
    loadbalance: true
    ssl.enabled: true

There are several built in metricbeat modules you can use. To enable the system module run.

metricbeat modules list
metricbeat modules enable system

Each module has its own configuration file where different metricsets can be enabled / disabled. Locate the configuration file for the system module. /etc/metricbeat/modules.d/system.yml

By default the following metrics are enabled. To enable or disable a metric simply comment or uncomment the line out.

- module: system
  period: 10s
  metricsets:
    - cpu
    - load
    - memory
    - network
    - process
    - process_summary
    - socket_summary
    #- core
    #- diskio
    #- socket

Ok, time to start ingesting data!

sudo systemctl enable metricbeat
sudo systemctl start metricbeat

The System module comes with a predefined Kibana dashboard. To view your dashboards for any of your Logit stacks, launch Kibana and choose Dashboards.