- Elastic integrations
- Integrations quick reference
- 1Password
- Abnormal Security
- ActiveMQ
- Active Directory Entity Analytics
- Admin By Request EPM integration
- Airflow
- Akamai
- Apache
- API (custom)
- Arbor Peakflow SP Logs
- Arista NG Firewall
- Atlassian
- Auditd
- Auth0
- authentik
- AWS
- Amazon CloudFront
- Amazon DynamoDB
- Amazon EBS
- Amazon EC2
- Amazon ECS
- Amazon EMR
- AWS API Gateway
- Amazon GuardDuty
- AWS Health
- Amazon Kinesis Data Firehose
- Amazon Kinesis Data Stream
- Amazon MQ
- Amazon Managed Streaming for Apache Kafka (MSK)
- Amazon NAT Gateway
- Amazon RDS
- Amazon Redshift
- Amazon S3
- Amazon S3 Storage Lens
- Amazon Security Lake
- Amazon SNS
- Amazon SQS
- Amazon VPC
- Amazon VPN
- AWS Bedrock
- AWS Billing
- AWS CloudTrail
- AWS CloudWatch
- AWS ELB
- AWS Fargate
- AWS Inspector
- AWS Lambda
- AWS Logs (custom)
- AWS Network Firewall
- AWS Route 53
- AWS Security Hub
- AWS Transit Gateway
- AWS Usage
- AWS WAF
- Azure
- Activity logs
- App Service
- Application Gateway
- Application Insights metrics
- Application Insights metrics overview
- Application State Insights metrics
- Azure logs (v2 preview)
- Azure OpenAI
- Billing metrics
- Container instance metrics
- Container registry metrics
- Container service metrics
- Custom Azure Logs
- Custom Blob Storage Input
- Database Account metrics
- Event Hub input
- Firewall logs
- Frontdoor
- Functions
- Microsoft Entra ID
- Monitor metrics
- Network Watcher VNet
- Network Watcher NSG
- Platform logs
- Resource metrics
- Spring Cloud logs
- Storage Account metrics
- Virtual machines metrics
- Virtual machines scaleset metrics
- Barracuda
- BeyondInsight and Password Safe Integration
- BitDefender
- Bitwarden
- blacklens.io
- Blue Coat Director Logs
- BBOT (Bighuge BLS OSINT Tool)
- Box Events
- Bravura Monitor
- Broadcom ProxySG
- Canva
- Cassandra
- CEL Custom API
- Ceph
- Check Point
- Cilium Tetragon
- CISA Known Exploited Vulnerabilities
- Cisco
- Cisco Meraki Metrics
- Citrix
- Claroty CTD
- Cloudflare
- Cloud Asset Inventory
- CockroachDB Metrics
- Common Event Format (CEF)
- Containerd
- CoreDNS
- Corelight
- Couchbase
- CouchDB
- Cribl
- CrowdStrike
- Cyberark
- Cybereason
- CylanceProtect Logs
- Custom Websocket logs
- Darktrace
- Data Exfiltration Detection
- DGA
- Digital Guardian
- Docker
- DomainTools Real Time Unified Feeds
- Elastic APM
- Elastic Fleet Server
- Elastic Security
- Elastic Stack monitoring
- Elasticsearch Service Billing
- Envoy Proxy
- ESET PROTECT
- ESET Threat Intelligence
- etcd
- Falco
- F5
- File Integrity Monitoring
- FireEye Network Security
- First EPSS
- Forcepoint Web Security
- ForgeRock
- Fortinet
- Gigamon
- GitHub
- GitLab
- Golang
- Google Cloud
- Custom GCS Input
- GCP
- GCP Audit logs
- GCP Billing metrics
- GCP Cloud Run metrics
- GCP CloudSQL metrics
- GCP Compute metrics
- GCP Dataproc metrics
- GCP DNS logs
- GCP Firestore metrics
- GCP Firewall logs
- GCP GKE metrics
- GCP Load Balancing metrics
- GCP Metrics Input
- GCP PubSub logs (custom)
- GCP PubSub metrics
- GCP Redis metrics
- GCP Security Command Center
- GCP Storage metrics
- GCP VPC Flow logs
- GCP Vertex AI
- GoFlow2 logs
- Hadoop
- HAProxy
- Hashicorp Vault
- HTTP Endpoint logs (custom)
- IBM MQ
- IIS
- Imperva
- InfluxDb
- Infoblox
- Iptables
- Istio
- Jamf Compliance Reporter
- Jamf Pro
- Jamf Protect
- Jolokia Input
- Journald logs (custom)
- JumpCloud
- Kafka
- Keycloak
- Kubernetes
- LastPass
- Lateral Movement Detection
- Linux Metrics
- Living off the Land Attack Detection
- Logs (custom)
- Lumos
- Lyve Cloud
- Mattermost
- Memcached
- Menlo Security
- Microsoft
- Microsoft 365
- Microsoft Defender for Cloud
- Microsoft Defender for Endpoint
- Microsoft DHCP
- Microsoft DNS Server
- Microsoft Entra ID Entity Analytics
- Microsoft Exchange Online Message Trace
- Microsoft Exchange Server
- Microsoft Graph Activity Logs
- Microsoft M365 Defender
- Microsoft Office 365 Metrics Integration
- Microsoft Sentinel
- Microsoft SQL Server
- Mimecast
- ModSecurity Audit
- MongoDB
- MongoDB Atlas
- MySQL
- Nagios XI
- NATS
- NetFlow Records
- Netskope
- Network Beaconing Identification
- Network Packet Capture
- Nginx
- Okta
- Oracle
- OpenAI
- OpenCanary
- Osquery
- Palo Alto
- pfSense
- PHP-FPM
- PingOne
- PingFederate
- Pleasant Password Server
- PostgreSQL
- Prometheus
- Proofpoint TAP
- Proofpoint On Demand
- Pulse Connect Secure
- Qualys VMDR
- QNAP NAS
- RabbitMQ Logs
- Radware DefensePro Logs
- Rapid7
- Redis
- Rubrik RSC Metrics Integration
- Sailpoint Identity Security Cloud
- Salesforce
- SentinelOne
- ServiceNow
- Slack Logs
- Snort
- Snyk
- SonicWall Firewall
- Sophos
- Spring Boot
- SpyCloud Enterprise Protection
- SQL Input
- Squid Logs
- SRX
- STAN
- Statsd Input
- Sublime Security
- Suricata
- StormShield SNS
- Symantec
- Symantec Endpoint Security
- Sysmon for Linux
- Sysdig
- Syslog Router Integration
- System
- System Audit
- Tanium
- TCP Logs (custom)
- Teleport
- Tenable
- Threat intelligence
- ThreatConnect
- Threat Map
- Thycotic Secret Server
- Tines
- Traefik
- Trellix
- Trend Micro
- TYCHON Agentless
- UDP Logs (custom)
- Universal Profiling
- Vectra Detect
- VMware
- WatchGuard Firebox
- WebSphere Application Server
- Windows
- Wiz
- Zeek
- ZeroFox
- Zero Networks
- ZooKeeper Metrics
- Zoom
- Zscaler
CloudSQL
editCloudSQL
editVersion |
2.41.0 (View all) |
Compatible Kibana version(s) |
8.13.0 or higher |
Supported Serverless project types |
Security |
Subscription level |
Basic |
The cloudsql
dataset fetches metrics from CloudSQL in Google Cloud Platform. It contains all metrics exported from the GCP CloudSQL Monitoring API.
gcp.labels.cloudsql.name
label is utilized to identify the type of Google Cloud SQL database that generated the metrics. In the pipelines, this label is crucial for distinguishing between various Cloud SQL database types and directing the metrics to their respective destinations. Current valid values are mysql
, postgres
and sqlserver
. Other values will be dropped.
MySQL Metrics
editCloudSQL MySQL metrics.
Example
An example event for cloudsql_mysql
looks as following:
{ "@timestamp": "2017-10-12T08:05:34.853Z", "cloud": { "account": { "id": "elastic-obs-integrations-dev", "name": "elastic-obs-integrations-dev" }, "instance": { "id": "4751091017865185079", "name": "gke-cluster-1-default-pool-6617a8aa-5clh" }, "machine": { "type": "e2-medium" }, "provider": "gcp", "availability_zone": "us-central1-c", "region": "us-central1" }, "event": { "dataset": "gcp.cloudsql_mysql", "duration": 115000, "module": "gcp" }, "gcp": { "cloudsql_mysql": { "database": { "up": 1 } }, "labels": { "user": { "goog-gke-node": "" } } }, "host": { "id": "4751091017865185079", "name": "gke-cluster-1-default-pool-6617a8aa-5clh" }, "metricset": { "name": "metrics", "period": 10000 }, "service": { "type": "gcp" } }
ECS Field Reference
Please refer to the following document for detailed information on ECS fields.
Exported fields
Field | Description | Type | Unit | Metric Type |
---|---|---|---|---|
@timestamp |
Event timestamp. |
date |
||
agent.id |
Unique identifier of this agent (if one exists). Example: For Beats this would be beat.id. |
keyword |
||
cloud.account.id |
The cloud account or organization id used to identify different entities in a multi-tenant environment. Examples: AWS account id, Google Cloud ORG Id, or other unique identifier. |
keyword |
||
cloud.image.id |
Image ID for the cloud instance. |
keyword |
||
data_stream.dataset |
Data stream dataset. |
constant_keyword |
||
data_stream.namespace |
Data stream namespace. |
constant_keyword |
||
data_stream.type |
Data stream type. |
constant_keyword |
||
event.dataset |
Event dataset |
constant_keyword |
||
event.module |
Event module |
constant_keyword |
||
gcp.cloudsql_mysql.database.auto_failover_request.count |
Delta of number of instance auto-failover requests. |
long |
gauge |
|
gcp.cloudsql_mysql.database.available_for_failover |
This is > 0 if the failover operation is available on the instance. |
long |
gauge |
|
gcp.cloudsql_mysql.database.cpu.reserved_cores.count |
Number of cores reserved for the database. |
double |
gauge |
|
gcp.cloudsql_mysql.database.cpu.usage_time.sec |
Delta CPU usage time in seconds. |
double |
s |
gauge |
gcp.cloudsql_mysql.database.cpu.utilization.pct |
Current CPU utilization represented as a percentage of the reserved CPU that is currently in use. |
double |
percent |
gauge |
gcp.cloudsql_mysql.database.disk.bytes_used.bytes |
Data utilization in bytes. |
long |
byte |
gauge |
gcp.cloudsql_mysql.database.disk.quota.bytes |
Maximum data disk size in bytes. |
long |
byte |
gauge |
gcp.cloudsql_mysql.database.disk.read_ops.count |
Delta count of data disk read IO operations. |
long |
gauge |
|
gcp.cloudsql_mysql.database.disk.utilization.pct |
The fraction of the disk quota that is currently in use. |
double |
percent |
gauge |
gcp.cloudsql_mysql.database.disk.write_ops.count |
Delta count of data disk write IO operations. |
long |
gauge |
|
gcp.cloudsql_mysql.database.innodb_buffer_pool_pages_dirty.count |
Number of unflushed pages in the InnoDB buffer pool. |
long |
gauge |
|
gcp.cloudsql_mysql.database.innodb_buffer_pool_pages_free.count |
Number of unused pages in the InnoDB buffer pool. |
long |
gauge |
|
gcp.cloudsql_mysql.database.innodb_buffer_pool_pages_total.count |
Total number of pages in the InnoDB buffer pool. |
long |
gauge |
|
gcp.cloudsql_mysql.database.innodb_data_fsyncs.count |
Delta count of InnoDB fsync() calls. |
long |
gauge |
|
gcp.cloudsql_mysql.database.innodb_os_log_fsyncs.count |
Delta count of InnoDB fsync() calls to the log file. |
long |
gauge |
|
gcp.cloudsql_mysql.database.innodb_pages_read.count |
Delta count of InnoDB pages read. |
long |
gauge |
|
gcp.cloudsql_mysql.database.innodb_pages_written.count |
Delta count of InnoDB pages written. |
long |
gauge |
|
gcp.cloudsql_mysql.database.instance_state |
The current serving state of the Cloud SQL instance. |
boolean |
||
gcp.cloudsql_mysql.database.memory.quota.bytes |
Maximum RAM size in bytes. |
long |
byte |
gauge |
gcp.cloudsql_mysql.database.memory.total_usage.bytes |
Total RAM usage in bytes. This metric reports the RAM usage of the database process, including the buffer/cache. |
long |
byte |
gauge |
gcp.cloudsql_mysql.database.memory.usage.bytes |
RAM usage in bytes. This metric reports the RAM usage of the server, excluding the buffer/cache. |
long |
byte |
gauge |
gcp.cloudsql_mysql.database.memory.utilization.pct |
The fraction of the memory quota that is currently in use. |
double |
percent |
gauge |
gcp.cloudsql_mysql.database.network.connections.count |
Number of connections to databases on the Cloud SQL instance. Only applicable to MySQL and SQL Server. |
long |
gauge |
|
gcp.cloudsql_mysql.database.network.received_bytes.count |
Delta count of bytes received through the network. |
long |
gauge |
|
gcp.cloudsql_mysql.database.network.sent_bytes.count |
Delta count of bytes sent through the network. |
long |
gauge |
|
gcp.cloudsql_mysql.database.queries.count |
Delta count of statements executed by the server. |
long |
gauge |
|
gcp.cloudsql_mysql.database.questions.count |
Delta count of statements executed by the server sent by the client. |
long |
gauge |
|
gcp.cloudsql_mysql.database.received_bytes.count |
Delta count of bytes received by MySQL process. |
long |
gauge |
|
gcp.cloudsql_mysql.database.replication.last_io_errno |
The error number of the most recent error that caused the I/O thread to stop. |
long |
gauge |
|
gcp.cloudsql_mysql.database.replication.last_sql_errno |
The error number of the most recent error that caused the SQL thread to stop. |
long |
gauge |
|
gcp.cloudsql_mysql.database.replication.network_lag.sec |
Indicates time taken from primary binary log to IO thread on replica. Only applicable to replicas. |
long |
s |
gauge |
gcp.cloudsql_mysql.database.replication.replica_lag.sec |
Number of seconds the read replica is behind its primary (approximation). |
double |
s |
gauge |
gcp.cloudsql_mysql.database.replication.seconds_behind_master.sec |
Number of seconds the read replica is behind its primary (approximation). |
long |
s |
gauge |
gcp.cloudsql_mysql.database.replication.slave_io_running |
Indicates whether the I/O thread for reading the primary’s binary log is running. Possible values are Yes, No and Connecting. |
keyword |
||
gcp.cloudsql_mysql.database.replication.slave_io_running_state |
Indicates whether the I/O thread for reading the primary’s binary log is running. Possible values are Yes, No and Connecting, and the values are exposed through the state field. |
boolean |
||
gcp.cloudsql_mysql.database.replication.slave_sql_running |
Indicates whether the SQL thread for executing events in the relay log is running. |
keyword |
||
gcp.cloudsql_mysql.database.replication.slave_sql_running_state |
Indicates whether the SQL thread for executing events in the relay log is running. Possible values are Yes / No, and the values are exposed through the state field. |
boolean |
||
gcp.cloudsql_mysql.database.sent_bytes.count |
Delta count of bytes sent by MySQL process. |
long |
gauge |
|
gcp.cloudsql_mysql.database.up |
Indicates if the server is up or not. |
long |
gauge |
|
gcp.cloudsql_mysql.database.uptime.sec |
Delta count of the time in seconds the instance has been running. |
long |
s |
gauge |
gcp.labels.metadata.* |
object |
|||
gcp.labels.metrics.* |
object |
|||
gcp.labels.resource.* |
object |
|||
gcp.labels.system.* |
object |
|||
gcp.labels.user.* |
object |
|||
gcp.labels_fingerprint |
Hashed value of the labels field. |
keyword |
||
gcp.metrics.... |
Metrics that returned from Google Cloud API query. |
object |
||
host.containerized |
If the host is a container. |
boolean |
||
host.os.build |
OS build information. |
keyword |
||
host.os.codename |
OS codename, if any. |
keyword |
PostgreSQL Metrics
editCloudSQL PostgreSQL metrics.
Example
An example event for cloudsql_postgresql
looks as following:
{ "@timestamp": "2017-10-12T08:05:34.853Z", "cloud": { "account": { "id": "elastic-obs-integrations-dev", "name": "elastic-obs-integrations-dev" }, "instance": { "id": "4751091017865185079", "name": "gke-cluster-1-default-pool-6617a8aa-5clh" }, "machine": { "type": "e2-medium" }, "provider": "gcp", "availability_zone": "us-central1-c", "region": "us-central1" }, "event": { "dataset": "gcp.cloudsql_postgresql", "duration": 115000, "module": "gcp" }, "gcp": { "cloudsql_postgresql": { "database": { "up": 1 } }, "labels": { "user": { "goog-gke-node": "" } } }, "host": { "id": "4751091017865185079", "name": "gke-cluster-1-default-pool-6617a8aa-5clh" }, "metricset": { "name": "metrics", "period": 10000 }, "service": { "type": "gcp" } }
ECS Field Reference
Please refer to the following document for detailed information on ECS fields.
Exported fields
Field | Description | Type | Unit | Metric Type |
---|---|---|---|---|
@timestamp |
Event timestamp. |
date |
||
agent.id |
Unique identifier of this agent (if one exists). Example: For Beats this would be beat.id. |
keyword |
||
cloud.account.id |
The cloud account or organization id used to identify different entities in a multi-tenant environment. Examples: AWS account id, Google Cloud ORG Id, or other unique identifier. |
keyword |
||
cloud.image.id |
Image ID for the cloud instance. |
keyword |
||
data_stream.dataset |
Data stream dataset. |
constant_keyword |
||
data_stream.namespace |
Data stream namespace. |
constant_keyword |
||
data_stream.type |
Data stream type. |
constant_keyword |
||
event.dataset |
Event dataset |
constant_keyword |
||
event.module |
Event module |
constant_keyword |
||
gcp.cloudsql_postgresql.database.auto_failover_request.count |
Delta of number of instance auto-failover requests. |
long |
gauge |
|
gcp.cloudsql_postgresql.database.available_for_failover |
This is > 0 if the failover operation is available on the instance. |
long |
gauge |
|
gcp.cloudsql_postgresql.database.cpu.reserved_cores.count |
Number of cores reserved for the database. |
double |
gauge |
|
gcp.cloudsql_postgresql.database.cpu.usage_time.sec |
Delta CPU usage time in seconds. |
double |
s |
gauge |
gcp.cloudsql_postgresql.database.cpu.utilization.pct |
Current CPU utilization represented as a percentage of the reserved CPU that is currently in use. |
double |
percent |
gauge |
gcp.cloudsql_postgresql.database.disk.bytes_used.bytes |
Data utilization in bytes. |
long |
byte |
gauge |
gcp.cloudsql_postgresql.database.disk.quota.bytes |
Maximum data disk size in bytes. |
long |
byte |
gauge |
gcp.cloudsql_postgresql.database.disk.read_ops.count |
Delta count of data disk read IO operations. |
long |
gauge |
|
gcp.cloudsql_postgresql.database.disk.utilization.pct |
The fraction of the disk quota that is currently in use. |
double |
percent |
gauge |
gcp.cloudsql_postgresql.database.disk.write_ops.count |
Delta count of data disk write IO operations. |
long |
gauge |
|
gcp.cloudsql_postgresql.database.insights.aggregate.execution_time |
Accumulated query execution time per user per database. This is the sum of cpu time, io wait time, lock wait time, process context switch, and scheduling for all the processes involved in the query execution. |
long |
counter |
|
gcp.cloudsql_postgresql.database.insights.aggregate.io_time |
Accumulated IO time per user per database. |
long |
counter |
|
gcp.cloudsql_postgresql.database.insights.aggregate.latencies |
Query latency distribution per user per database. |
long |
counter |
|
gcp.cloudsql_postgresql.database.insights.aggregate.lock_time |
Accumulated lock wait time per user per database. |
long |
counter |
|
gcp.cloudsql_postgresql.database.insights.aggregate.row.count |
Total number of rows affected during query execution. |
long |
counter |
|
gcp.cloudsql_postgresql.database.insights.aggregate.shared_blk_access.count |
Shared blocks (regular tables & indexed) accessed by statement execution. |
long |
counter |
|
gcp.cloudsql_postgresql.database.insights.perquery.execution_time |
Accumulated execution times per user per database per query.This is the sum of cpu time, io wait time, lock wait time, process context switch, and scheduling for all the processes involved in the query execution. |
long |
counter |
|
gcp.cloudsql_postgresql.database.insights.perquery.io_time |
Accumulated IO time per user per database per query. |
long |
counter |
|
gcp.cloudsql_postgresql.database.insights.perquery.latencies |
Query latency distribution per user per database per query. |
histogram |
||
gcp.cloudsql_postgresql.database.insights.perquery.lock_time |
Accumulated lock wait time per user per database per query. |
long |
counter |
|
gcp.cloudsql_postgresql.database.insights.perquery.row.count |
Total number of rows affected during query execution. |
long |
counter |
|
gcp.cloudsql_postgresql.database.insights.perquery.shared_blk_access.count |
Shared blocks (regular tables & indexed) accesssed by statement execution. |
long |
counter |
|
gcp.cloudsql_postgresql.database.insights.pertag.execution_time |
Accumulated execution times per user per database per tag.This is the sum of cpu time, io wait time, lock wait time, process context switch, and scheduling for all the processes involved in the query execution. |
long |
counter |
|
gcp.cloudsql_postgresql.database.insights.pertag.io_time |
Accumulated IO write time per user per database per tag. |
long |
counter |
|
gcp.cloudsql_postgresql.database.insights.pertag.latencies |
Query latency distribution per user per database per tag. |
histogram |
||
gcp.cloudsql_postgresql.database.insights.pertag.lock_time |
Accumulated lock wait time per user per database per tag. |
long |
counter |
|
gcp.cloudsql_postgresql.database.insights.pertag.row.count |
Total number of rows affected during query execution. |
long |
counter |
|
gcp.cloudsql_postgresql.database.insights.pertag.shared_blk_access.count |
Shared blocks (regular tables & indexed) accessed by statement execution. |
long |
counter |
|
gcp.cloudsql_postgresql.database.instance_state |
The current serving state of the Cloud SQL instance. |
boolean |
||
gcp.cloudsql_postgresql.database.memory.quota.bytes |
Maximum RAM size in bytes. |
long |
byte |
gauge |
gcp.cloudsql_postgresql.database.memory.total_usage.bytes |
Total RAM usage in bytes. This metric reports the RAM usage of the database process, including the buffer/cache. |
long |
byte |
gauge |
gcp.cloudsql_postgresql.database.memory.usage.bytes |
RAM usage in bytes. This metric reports the RAM usage of the server, excluding the buffer/cache. |
long |
byte |
gauge |
gcp.cloudsql_postgresql.database.memory.utilization.pct |
The fraction of the memory quota that is currently in use. |
double |
percent |
gauge |
gcp.cloudsql_postgresql.database.network.connections.count |
Number of connections to databases on the Cloud SQL instance. Only applicable to MySQL and SQL Server. |
long |
gauge |
|
gcp.cloudsql_postgresql.database.network.received_bytes.count |
Delta count of bytes received through the network. |
long |
gauge |
|
gcp.cloudsql_postgresql.database.network.sent_bytes.count |
Delta count of bytes sent through the network. |
long |
gauge |
|
gcp.cloudsql_postgresql.database.num_backends.count |
Number of connections to the Cloud SQL PostgreSQL instance. |
long |
gauge |
|
gcp.cloudsql_postgresql.database.replication.network_lag.sec |
Indicates time taken from primary binary log to IO thread on replica. Only applicable to replicas. |
long |
s |
gauge |
gcp.cloudsql_postgresql.database.replication.replica_byte_lag.bytes |
Replication lag in bytes. Reported from the master per replica. |
long |
byte |
gauge |
gcp.cloudsql_postgresql.database.replication.replica_lag.sec |
Number of seconds the read replica is behind its primary (approximation). |
double |
s |
gauge |
gcp.cloudsql_postgresql.database.transaction.count |
Delta count of number of transactions. |
long |
gauge |
|
gcp.cloudsql_postgresql.database.transaction_id.count |
Delta count of transaction ID. |
long |
gauge |
|
gcp.cloudsql_postgresql.database.transaction_id_utilization.pct |
Current utilization represented as a percentage of transaction IDs consumed by the Cloud SQL PostgreSQL instance. Values are typically numbers between 0.0 and 1.0. Charts display the values as a percentage between 0% and 100%. |
double |
percent |
gauge |
gcp.cloudsql_postgresql.database.up |
Indicates if the server is up or not. |
long |
gauge |
|
gcp.cloudsql_postgresql.database.uptime.sec |
Delta count of the time in seconds the instance has been running. |
long |
s |
gauge |
gcp.cloudsql_postgresql.database.vacuum.oldest_transaction_age |
Age of the oldest transaction yet to be vacuumed in the Cloud SQL PostgreSQL instance, measured in number of transactions that have happened since the oldest transaction. |
long |
gauge |
|
gcp.labels.metadata.* |
object |
|||
gcp.labels.metrics.* |
object |
|||
gcp.labels.resource.* |
object |
|||
gcp.labels.system.* |
object |
|||
gcp.labels.user.* |
object |
|||
gcp.labels_fingerprint |
Hashed value of the labels field. |
keyword |
||
gcp.metrics.... |
Metrics that returned from Google Cloud API query. |
object |
||
host.containerized |
If the host is a container. |
boolean |
||
host.os.build |
OS build information. |
keyword |
||
host.os.codename |
OS codename, if any. |
keyword |
SQL Server Metrics
editCloudSQL SQL Server metrics.
Example
An example event for cloudsql_sqlserver
looks as following:
{ "@timestamp": "2017-10-12T08:05:34.853Z", "cloud": { "account": { "id": "elastic-obs-integrations-dev", "name": "elastic-obs-integrations-dev" }, "instance": { "id": "4751091017865185079", "name": "gke-cluster-1-default-pool-6617a8aa-5clh" }, "machine": { "type": "e2-medium" }, "provider": "gcp", "availability_zone": "us-central1-c", "region": "us-central1" }, "event": { "dataset": "gcp.cloudsql_sqlserver", "duration": 115000, "module": "gcp" }, "gcp": { "cloudsql_sqlserver": { "database": { "up": 1 } }, "labels": { "user": { "goog-gke-node": "" } } }, "host": { "id": "4751091017865185079", "name": "gke-cluster-1-default-pool-6617a8aa-5clh" }, "metricset": { "name": "metrics", "period": 10000 }, "service": { "type": "gcp" } }
ECS Field Reference
Please refer to the following document for detailed information on ECS fields.
Exported fields
Field | Description | Type | Unit | Metric Type |
---|---|---|---|---|
@timestamp |
Event timestamp. |
date |
||
agent.id |
Unique identifier of this agent (if one exists). Example: For Beats this would be beat.id. |
keyword |
||
cloud.account.id |
The cloud account or organization id used to identify different entities in a multi-tenant environment. Examples: AWS account id, Google Cloud ORG Id, or other unique identifier. |
keyword |
||
cloud.image.id |
Image ID for the cloud instance. |
keyword |
||
data_stream.dataset |
Data stream dataset. |
constant_keyword |
||
data_stream.namespace |
Data stream namespace. |
constant_keyword |
||
data_stream.type |
Data stream type. |
constant_keyword |
||
event.dataset |
Event dataset |
constant_keyword |
||
event.module |
Event module |
constant_keyword |
||
gcp.cloudsql_sqlserver.database.audits_size.bytes |
Tracks the size in bytes of stored SQLServer audit files on an instance. |
long |
byte |
gauge |
gcp.cloudsql_sqlserver.database.audits_upload.count |
Delta count of total number of SQLServer audit file uploads to a GCS bucket and whether or not an upload was successful. |
long |
gauge |
|
gcp.cloudsql_sqlserver.database.auto_failover_request.count |
Delta of number of instance auto-failover requests. |
long |
gauge |
|
gcp.cloudsql_sqlserver.database.available_for_failover |
This is > 0 if the failover operation is available on the instance. |
long |
gauge |
|
gcp.cloudsql_sqlserver.database.cpu.reserved_cores.count |
Number of cores reserved for the database. |
double |
gauge |
|
gcp.cloudsql_sqlserver.database.cpu.usage_time.sec |
Delta CPU usage time in seconds. |
double |
s |
gauge |
gcp.cloudsql_sqlserver.database.cpu.utilization.pct |
Current CPU utilization represented as a percentage of the reserved CPU that is currently in use. |
double |
percent |
gauge |
gcp.cloudsql_sqlserver.database.disk.bytes_used.bytes |
Data utilization in bytes. |
long |
byte |
gauge |
gcp.cloudsql_sqlserver.database.disk.quota.bytes |
Maximum data disk size in bytes. |
long |
byte |
gauge |
gcp.cloudsql_sqlserver.database.disk.read_ops.count |
Delta count of data disk read IO operations. |
long |
gauge |
|
gcp.cloudsql_sqlserver.database.disk.utilization.pct |
The fraction of the disk quota that is currently in use. |
double |
percent |
gauge |
gcp.cloudsql_sqlserver.database.disk.write_ops.count |
Delta count of data disk write IO operations. |
long |
gauge |
|
gcp.cloudsql_sqlserver.database.instance_state |
The current serving state of the Cloud SQL instance. |
boolean |
||
gcp.cloudsql_sqlserver.database.memory.quota.bytes |
Maximum RAM size in bytes. |
long |
byte |
gauge |
gcp.cloudsql_sqlserver.database.memory.total_usage.bytes |
Total RAM usage in bytes. This metric reports the RAM usage of the database process, including the buffer/cache. |
long |
byte |
gauge |
gcp.cloudsql_sqlserver.database.memory.usage.bytes |
RAM usage in bytes. This metric reports the RAM usage of the server, excluding the buffer/cache. |
long |
byte |
gauge |
gcp.cloudsql_sqlserver.database.memory.utilization.pct |
The fraction of the memory quota that is currently in use. |
double |
percent |
gauge |
gcp.cloudsql_sqlserver.database.network.connections.count |
Number of connections to databases on the Cloud SQL instance. Only applicable to MySQL and SQL Server. |
long |
gauge |
|
gcp.cloudsql_sqlserver.database.network.received_bytes.count |
Delta count of bytes received through the network. |
long |
gauge |
|
gcp.cloudsql_sqlserver.database.network.sent_bytes.count |
Delta count of bytes sent through the network. |
long |
gauge |
|
gcp.cloudsql_sqlserver.database.replication.network_lag.sec |
Indicates time taken from primary binary log to IO thread on replica. Only applicable to replicas. |
long |
s |
gauge |
gcp.cloudsql_sqlserver.database.replication.replica_lag.sec |
Number of seconds the read replica is behind its primary (approximation). |
double |
s |
gauge |
gcp.cloudsql_sqlserver.database.up |
Indicates if the server is up or not. |
long |
gauge |
|
gcp.cloudsql_sqlserver.database.uptime.sec |
Delta count of the time in seconds the instance has been running. |
long |
s |
gauge |
gcp.labels.metadata.* |
object |
|||
gcp.labels.metrics.* |
object |
|||
gcp.labels.resource.* |
object |
|||
gcp.labels.system.* |
object |
|||
gcp.labels.user.* |
object |
|||
gcp.labels_fingerprint |
Hashed value of the labels field. |
keyword |
||
gcp.metrics.... |
Metrics that returned from Google Cloud API query. |
object |
||
host.containerized |
If the host is a container. |
boolean |
||
host.os.build |
OS build information. |
keyword |
||
host.os.codename |
OS codename, if any. |
keyword |
Changelog
editChangelog
Version | Details | Kibana version(s) |
---|---|---|
2.41.0 |
Enhancement (View pull request) |
8.13.0 or higher |
2.40.1 |
Enhancement (View pull request) |
8.13.0 or higher |
2.40.0 |
Enhancement (View pull request) |
8.13.0 or higher |
2.39.0 |
Enhancement (View pull request) |
8.13.0 or higher |
2.38.0 |
Enhancement (View pull request) Bug fix (View pull request) |
8.13.0 or higher |
2.37.2 |
Bug fix (View pull request) |
8.13.0 or higher |
2.37.1 |
Enhancement (View pull request) |
8.13.0 or higher |
2.37.0 |
Enhancement (View pull request) |
8.13.0 or higher |
2.36.0 |
Enhancement (View pull request) |
8.13.0 or higher |
2.35.0 |
Enhancement (View pull request) |
8.13.0 or higher |
2.34.1 |
Bug fix (View pull request) |
8.12.0 or higher |
2.34.0 |
Enhancement (View pull request) |
8.12.0 or higher |
2.33.2 |
Enhancement (View pull request) |
8.12.0 or higher |
2.33.1 |
Enhancement (View pull request) |
8.12.0 or higher |
2.33.0 |
Enhancement (View pull request) |
8.12.0 or higher |
2.32.1 |
Enhancement (View pull request) |
8.12.0 or higher |
2.32.0 |
Enhancement (View pull request) |
8.12.0 or higher |
2.31.2 |
Bug fix (View pull request) |
8.7.1 or higher |
2.31.1 |
Enhancement (View pull request) |
8.7.1 or higher |
2.31.0 |
Enhancement (View pull request) |
8.7.1 or higher |
2.30.1 |
Bug fix (View pull request) |
8.7.1 or higher |
2.30.0 |
Enhancement (View pull request) Enhancement (View pull request) Bug fix (View pull request) Bug fix (View pull request) |
8.7.1 or higher |
2.29.1 |
Bug fix (View pull request) |
8.7.1 or higher |
2.29.0 |
Bug fix (View pull request) |
8.7.1 or higher |
2.28.5 |
Enhancement (View pull request) |
8.7.1 or higher |
2.28.4 |
Enhancement (View pull request) |
8.7.1 or higher |
2.28.3 |
Enhancement (View pull request) |
8.7.1 or higher |
2.28.2 |
Enhancement (View pull request) |
8.7.1 or higher |
2.28.1 |
Enhancement (View pull request) |
8.7.1 or higher |
2.28.0 |
Enhancement (View pull request) |
8.7.1 or higher |
2.27.0 |
Enhancement (View pull request) |
8.7.1 or higher |
2.26.0 |
Bug fix (View pull request) |
8.7.1 or higher |
2.25.1 |
Bug fix (View pull request) |
8.7.1 or higher |
2.25.0 |
Enhancement (View pull request) |
8.7.1 or higher |
2.24.0 |
Enhancement (View pull request) |
8.7.1 or higher |
2.23.0 |
Enhancement (View pull request) |
8.7.1 or higher |
2.22.1 |
Enhancement (View pull request) |
8.6.0 or higher |
2.22.0 |
Enhancement (View pull request) |
8.6.0 or higher |
2.21.0 |
Enhancement (View pull request) |
8.6.0 or higher |
2.20.1 |
Bug fix (View pull request) |
8.6.0 or higher |
2.20.0 |
Enhancement (View pull request) |
8.6.0 or higher |
2.19.1 |
Enhancement (View pull request) |
8.6.0 or higher |
2.19.0 |
Enhancement (View pull request) |
8.6.0 or higher |
2.18.0 |
Enhancement (View pull request) |
8.6.0 or higher |
2.17.2 |
Bug fix (View pull request) |
8.6.0 or higher |
2.17.1 |
Enhancement (View pull request) |
8.6.0 or higher |
2.17.0 |
Enhancement (View pull request) Enhancement (View pull request) Enhancement (View pull request) Enhancement (View pull request) |
8.6.0 or higher |
2.16.2 |
Bug fix (View pull request) |
8.5.0 or higher |
2.16.1 |
Bug fix (View pull request) |
8.5.0 or higher |
2.16.0 |
Enhancement (View pull request) |
8.5.0 or higher |
2.15.2 |
Enhancement (View pull request) |
8.5.0 or higher |
2.15.1 |
Enhancement (View pull request) |
8.5.0 or higher |
2.15.0 |
Enhancement (View pull request) Enhancement (View pull request) |
8.5.0 or higher |
2.14.0 |
Enhancement (View pull request) |
8.3.0 or higher |
2.13.0 |
Enhancement (View pull request) |
8.3.0 or higher |
2.12.1 |
Bug fix (View pull request) |
7.17.6 or higher |
2.12.0 |
Enhancement (View pull request) |
7.17.6 or higher |
2.11.12 |
Bug fix (View pull request) |
7.17.6 or higher |
2.11.11 |
Bug fix (View pull request) |
7.17.6 or higher |
2.11.10 |
Enhancement (View pull request) Enhancement (View pull request) Enhancement (View pull request) Enhancement (View pull request) Enhancement (View pull request) Enhancement (View pull request) |
7.17.6 or higher |
2.11.10-beta.6 |
Enhancement (View pull request) |
— |
2.11.10-beta.5 |
Enhancement (View pull request) |
— |
2.11.10-beta.4 |
Enhancement (View pull request) |
— |
2.11.10-beta.3 |
Enhancement (View pull request) |
— |
2.11.10-beta.2 |
Enhancement (View pull request) |
— |
2.11.10-beta.1 |
Enhancement (View pull request) |
— |
2.11.9 |
Bug fix (View pull request) |
7.17.6 or higher |
2.11.8 |
Enhancement (View pull request) |
7.17.6 or higher |
2.11.7 |
Enhancement (View pull request) |
7.17.6 or higher |
2.11.6 |
Enhancement (View pull request) |
7.17.6 or higher |
2.11.5 |
Enhancement (View pull request) |
7.17.6 or higher |
2.11.4 |
Enhancement (View pull request) |
7.17.6 or higher |
2.11.3 |
Enhancement (View pull request) |
7.17.6 or higher |
2.11.2 |
Enhancement (View pull request) |
7.17.6 or higher |
2.11.1 |
Enhancement (View pull request) |
7.17.6 or higher |
2.11.0 |
Enhancement (View pull request) |
7.17.6 or higher |
2.10.0 |
Enhancement (View pull request) |
7.17.6 or higher |
2.9.0 |
Enhancement (View pull request) |
7.17.6 or higher |
2.8.0 |
Enhancement (View pull request) |
7.17.6 or higher |
2.7.0 |
Enhancement (View pull request) |
7.17.6 or higher |
2.6.0 |
Enhancement (View pull request) |
7.17.6 or higher |
2.5.0 |
Enhancement (View pull request) Bug fix (View pull request) Bug fix (View pull request) Bug fix (View pull request) Enhancement (View pull request) |
7.17.6 or higher |
2.4.0 |
Enhancement (View pull request) |
7.17.6 or higher |
2.3.0 |
Enhancement (View pull request) |
7.17.6 or higher |
2.2.1 |
Enhancement (View pull request) |
7.17.6 or higher |
2.2.0 |
Enhancement (View pull request) |
7.17.6 or higher |
2.1.0 |
Enhancement (foobar[View pull request]) |
7.17.6 or higher |
2.0.0 |
Breaking change (View pull request) This change involves Users with GCP integration enabled will need to input values for these variables again when upgrading the policies to this version. Enhancement (View pull request) Enhancement (View pull request) Enhancement (View pull request) |
8.3.0 or higher |
1.10.0 |
Enhancement (View pull request) |
7.17.0 or higher |
1.9.2 |
Bug fix (View pull request) |
7.17.0 or higher |
1.9.1 |
Enhancement (View pull request) |
7.17.0 or higher |
1.9.0 |
Enhancement (View pull request) |
7.17.0 or higher |
1.8.0 |
Enhancement (View pull request) |
7.17.0 or higher |
1.7.0 |
Enhancement (View pull request) Bug fix (View pull request) |
— |
1.6.1 |
Enhancement (View pull request) |
7.16.3 or higher |
1.6.0 |
Enhancement (View pull request) |
— |
1.5.1 |
Enhancement (View pull request) |
7.16.3 or higher |
1.5.0 |
Enhancement (View pull request) |
7.16.3 or higher |
1.4.2 |
Bug fix (View pull request) |
7.16.3 or higher |
1.4.1 |
Bug fix (View pull request) |
7.16.3 or higher |
1.4.0 |
Enhancement (View pull request) |
— |
1.3.1 |
Bug fix (View pull request) |
7.15.0 or higher |
1.3.0 |
Enhancement (View pull request) |
7.15.0 or higher |
1.2.2 |
Bug fix (View pull request) |
7.15.0 or higher |
1.2.1 |
Bug fix (View pull request) |
— |
1.2.0 |
Enhancement (View pull request) |
7.15.0 or higher |
1.1.2 |
Enhancement (View pull request) |
7.15.0 or higher |
1.1.1 |
Bug fix (View pull request) |
— |
1.1.0 |
Enhancement (View pull request) |
7.15.0 or higher |
1.0.0 |
Enhancement (View pull request) Enhancement (View pull request) |
— |
0.3.3 |
Enhancement (View pull request) |
— |
0.3.2 |
Enhancement (View pull request) |
— |
0.3.1 |
Enhancement (View pull request) |
— |
0.3.0 |
Enhancement (View pull request) |
— |
0.2.0 |
Enhancement (View pull request) |
— |
0.1.0 |
Enhancement (View pull request) |
— |
0.0.2 |
Enhancement (View pull request) |
— |
0.0.1 |
Enhancement (View pull request) |
— |