-
Notifications
You must be signed in to change notification settings - Fork 4.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
filebeat/input/{tcp,udp}: collect rx and drops metrics for unspecified addresses #35111
Conversation
…d addresses Previously we were accepting exact (case-folded) address matches only, resulting in loss of receive queue and drops metrics when the inputs were listening on 0.0.0.0. This change fixes that by collecting these values from all /proc lines that have a matching port when the address is unspecified.
3bfaaf9
to
95f6656
Compare
Pinging @elastic/security-external-integrations (Team:Security-External Integrations) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
changes LGTM.
One question, does any of this apply to IPv6? Different file in /proc so just want to double check that we don't have similar bugs waiting for us there.
@leehinman No, it's all v4. We don't handle metrics for v6. This is something that we will probably need to add. The code that's here is readily generalisable for that reason. |
@leehinman We will be adding support for v6 in a follow-up. |
…d addresses (#35111) Previously we were accepting exact (case-folded) address matches only, resulting in loss of receive queue and drops metrics when the inputs were listening on 0.0.0.0. This change fixes that by collecting these values from all /proc lines that have a matching port when the address is unspecified. (cherry picked from commit 097bd76)
…d addresses (#35111) (#35121) Previously we were accepting exact (case-folded) address matches only, resulting in loss of receive queue and drops metrics when the inputs were listening on 0.0.0.0. This change fixes that by collecting these values from all /proc lines that have a matching port when the address is unspecified. (cherry picked from commit 097bd76) Co-authored-by: Dan Kortschak <90160302+efd6@users.noreply.github.com>
…d addresses (#35111) Previously we were accepting exact (case-folded) address matches only, resulting in loss of receive queue and drops metrics when the inputs were listening on 0.0.0.0. This change fixes that by collecting these values from all /proc lines that have a matching port when the address is unspecified.
What does this PR do?
Previously we were accepting exact (case-folded) address matches only, resulting in loss of receive queue and drops metrics when the inputs were listening on 0.0.0.0. This change fixes that by collecting these values from all /proc lines that have a matching port when the address is unspecified.
Why is it important?
Patches an observability hole.
Checklist
CHANGELOG.next.asciidoc
orCHANGELOG-developer.next.asciidoc
.Author's Checklist
How to test this PR locally
Related issues
Use cases
Screenshots
Logs