Skip to content

Commit

Permalink
Add topic about missing fields
Browse files Browse the repository at this point in the history
  • Loading branch information
dedemorton committed Aug 21, 2024
1 parent 7717613 commit 275ae0d
Show file tree
Hide file tree
Showing 3 changed files with 39 additions and 0 deletions.
37 changes: 37 additions & 0 deletions docs/en/observability/handle-no-results-found-message.asciidoc
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
[[handle-no-results-found-message]]
= Fix "no results found" message

To correctly render visualizations in the {observability} UI,
all metrics used by the UI must be present in the collected data.
For a description of these metrics, refer to <<metrics-reference>>.

There are several reasons why metrics might be missing from the collected data:

**The visualization requires a metric that's not relevant to your monitored hosts**

For example, if you're only observing Windows hosts, the 'load' metric is not collected because 'load' is not a Windows concept.
In this situation, you can ignore the "no results found" message.

**You may not be collecting all the required metrics**

This could be for any of these reasons:

* The integration that collects the missing metrics is not installed.
For example, to collect metrics from your host system, you can use the {integrations-docs}/system[System integration].
To fix the problem, install the integration and configure it to send the missing metrics.
+
TIP: Follow one of our quickstarts under **Observability** → **Add data** → **Collect and analyze logs** to make sure the correct integrations are installed and all required metrics are collected.

* You are not using the Elastic distribution of the OpenTelemetry Collector, which automatically maps data to the Elastic Common Schema (ECS) fields expected by the visualization.
+
TIP: Follow our OpenTelemetry quickstart under **Observability** → **Add data** → **Monitor infrastructure** to make sure OpenTelemetry data is correctly mapped to ECS-compliant fields.

//TODO: Make quickstarts an active link after the docs are merged.

* You have explicitly chosen not to send these metrics.
You may choose to limit the metrics sent to Elastic to save on space and improve cluster performance.
For example, the System integration has options to choose which metrics you want to send.
You can {fleet-guide}/edit-or-delete-integration-policy.html[edit the integration policy] to begin collecting the missing metrics. For example:
+
[role="screenshot"]
image::images/turn-on-system-metrics.png[Screenshot showing system cpu and diskio metrics selected for collection]
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
2 changes: 2 additions & 0 deletions docs/en/observability/index.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -78,6 +78,8 @@ include::monitor-infra/inspect-metric-anomalies.asciidoc[leveloffset=+2]

include::monitor-infra/configure-metrics-sources.asciidoc[leveloffset=+2]

include::handle-no-results-found-message.asciidoc[leveloffset=+2]

include::monitor-infra/metrics-reference.asciidoc[leveloffset=+2]

// AWS monitoring
Expand Down

0 comments on commit 275ae0d

Please sign in to comment.