elastic / elastic/integrations

[System]: The values of process.cpu.pct and system.process.cpu.total.norm.pct higher then 1 and 100%

Open
#15,610 1 comment 0 reactions 0 assignees View on GitHub
Integration:system needs:triage Team:Obs-InfraObs
Dominant language
Handlebars
Stars
333
Forks
647
Avg merge
3d 4h
Merged PRs (30d)
209

Description

### Integration Name

System [system]

### Dataset Name

system.process

### Integration Version

2.6.1

### Agent Version

8.14.1

### Agent Output Type

logstash

### Elasticsearch Version

8.19.1

### OS Version and Architecture

Windows Server 2019 Standard

### Software/API Version

_No response_

### Error Message

[System Integration doc](https://www.elastic.co/docs/reference/integrations/system#process)

> * process.cpu.pct
> The percentage of CPU time spent by the process since the last event. This value is normalized by the number of CPU cores and it ranges from 0 to 1.
> * system.process.cpu.total.norm.pct
> The percentage of CPU time spent by the process since the last event. This value is normalized by the number of CPU cores and it ranges from 0 to 100%.

But, process.cpu.pct is higher then 1 and system.process.cpu.total.norm.pct is higher then 100%

### Event Original

_No response_

### What did you do?

1. Create a policy with "system integration" that "Collect metrics from System instances" is Enable.
2. Enable System process metrics only.
3. Apply the policy to Windows Server 2019 Standard

### What did you see?

"_source": {
"agent": {
"version": "8.14.1"
},
},
"fields": {
"system.process.cpu.total.norm.pct": [ 2.071 ],
"process.cpu.pct": [ 2.071 ],
}

### What did you expect to see?

"fields": {
"system.process.cpu.total.norm.pct": [ 0.71 ],
"process.cpu.pct": [ 0.71 ],
}
Number eq or less then 1

### Anything else?

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.