Consult the reference for the metrics reported by the System Metrics Source on macOS.

Events generated by the System Metrics Source have metrics metadata to designate dimension and metric fields. The host field contains the hostname, and is included as a dimension in all of them. The collectors include:

• System
• CPU
• Memory
• Network
• Disk

In the Source’s configuration modal, you can set the level of detail for each type of metrics:

• Basic enables minimal metrics, averaged or aggregated.
• All enables full, detailed metrics, specified for individual CPUs, interfaces, and so on.
• Custom displays sub-menus and buttons from which you can choose a level of detail (Basic, All, Custom, or Disabled) for each type of event.
• Disabled means that no metrics will be generated.

Basic and Custom have different meanings depending on event type and are described in the following sections.

The tables outline the metrics emitted for each mode (Basic or Custom) and where applicable, the dimensions (to indicate where the metrics are coming from).

System ​

With System Metrics enabled, Cribl Edge captures CPU load averages, uptime, and count. The Custom option allows you to include process metrics that reflect the numbers of processes in various states.

Metrics for the overall system include the following:

CPU ​

Cribl Edge captures active, user, system, and idle percentages over all CPUs, with options to add per-CPU metrics, a nice breakdown, and raw time counters for each state.

Metrics for CPUs include the following:

• The Per-CPU metrics option adds metrics with the cpu dimension.
• The Detailed metrics option adds nice as a mode value.

Memory ​

With System Metrics enabled, Cribl Edge captures memory totals, used and available memory, swap usage, and virtual memory statistics derived from macOS. Optionally include detailed memory and vmstat-style breakdowns.

Metrics for memory include the following:

Network ​

With System Metrics enabled, Cribl Edge captures bytes, packets, errors, and multicast counts over all interfaces. The Custom option allows you to filter interfaces and to choose per-interface metrics.

Metrics for networks include the following:

Disk ​

With System Metrics enabled, Cribl Edge captures disk I/O (reads, writes, and optionally I/O time) and filesystem space usage. The Custom option allows you to filter devices, mountpoint, and filesystem type, and to choose per-device metrics, detailed disk metrics, and inode-related filesystem metrics.

For APFS, aggregate filesystem capacity avoids double-counting volumes that share a storage pool; inode metrics remain per mount.

Metrics for Disk include the following: