Add diag_documents_volume

custom_documentation/doc/endpoint/metrics/metrics.md

@@ -26,6 +26,23 @@ This is an internal state management document that includes metrics on Endpoint'
 | Endpoint.metrics.cpu.endpoint.histogram.values |
 | Endpoint.metrics.cpu.endpoint.latest |
 | Endpoint.metrics.cpu.endpoint.mean |
+| Endpoint.metrics.diag_documents_volume.dns_events.sent_bytes |
+| Endpoint.metrics.diag_documents_volume.dns_events.sent_count |
+| Endpoint.metrics.diag_documents_volume.dns_events.suppressed_bytes |
+| Endpoint.metrics.diag_documents_volume.dns_events.suppressed_count |
+| Endpoint.metrics.diag_documents_volume.overall.sent_bytes |
+| Endpoint.metrics.diag_documents_volume.overall.sent_count |
+| Endpoint.metrics.diag_documents_volume.overall.suppressed_bytes |
+| Endpoint.metrics.diag_documents_volume.overall.suppressed_count |
+| Endpoint.metrics.diag_documents_volume.process_events.sent_bytes |
+| Endpoint.metrics.diag_documents_volume.process_events.sent_count |
+| Endpoint.metrics.diag_documents_volume.process_events.sources.sent_bytes |
+| Endpoint.metrics.diag_documents_volume.process_events.sources.sent_count |
+| Endpoint.metrics.diag_documents_volume.process_events.sources.source |
+| Endpoint.metrics.diag_documents_volume.process_events.sources.suppressed_bytes |
+| Endpoint.metrics.diag_documents_volume.process_events.sources.suppressed_count |
+| Endpoint.metrics.diag_documents_volume.process_events.suppressed_bytes |
+| Endpoint.metrics.diag_documents_volume.process_events.suppressed_count |
 | Endpoint.metrics.disks.device |
 | Endpoint.metrics.disks.endpoint_drive |
 | Endpoint.metrics.disks.free |

custom_documentation/src/endpoint/data_stream/metrics/metrics.yaml

@@ -33,6 +33,23 @@ fields:
   - Endpoint.metrics.cpu.endpoint.histogram.values
   - Endpoint.metrics.cpu.endpoint.latest
   - Endpoint.metrics.cpu.endpoint.mean
+  - Endpoint.metrics.diag_documents_volume.dns_events.sent_bytes
+  - Endpoint.metrics.diag_documents_volume.dns_events.sent_count
+  - Endpoint.metrics.diag_documents_volume.dns_events.suppressed_bytes
+  - Endpoint.metrics.diag_documents_volume.dns_events.suppressed_count
+  - Endpoint.metrics.diag_documents_volume.overall.sent_bytes
+  - Endpoint.metrics.diag_documents_volume.overall.sent_count
+  - Endpoint.metrics.diag_documents_volume.overall.suppressed_bytes
+  - Endpoint.metrics.diag_documents_volume.overall.suppressed_count
+  - Endpoint.metrics.diag_documents_volume.process_events.sent_bytes
+  - Endpoint.metrics.diag_documents_volume.process_events.sent_count
+  - Endpoint.metrics.diag_documents_volume.process_events.sources.sent_bytes
+  - Endpoint.metrics.diag_documents_volume.process_events.sources.sent_count
+  - Endpoint.metrics.diag_documents_volume.process_events.sources.source
+  - Endpoint.metrics.diag_documents_volume.process_events.sources.suppressed_bytes
+  - Endpoint.metrics.diag_documents_volume.process_events.sources.suppressed_count
+  - Endpoint.metrics.diag_documents_volume.process_events.suppressed_bytes
+  - Endpoint.metrics.diag_documents_volume.process_events.suppressed_count
   - Endpoint.metrics.disks.device
   - Endpoint.metrics.disks.endpoint_drive
   - Endpoint.metrics.disks.free

custom_schemas/custom_endpoint.yml

@@ -460,6 +460,261 @@
       type: object
       description: Metrics fields hold the endpoint and system's performance metrics
 
+    - name: metrics.diag_documents_volume
+      level: custom
+      type: object
+      description: Statistics about diagnostic documents
+
+    - name: metrics.diag_documents_volume.dns_events.sent_bytes
+      level: custom
+      description: Total size of documents that would be sent
+      type: long
+
+    - name: metrics.diag_documents_volume.dns_events.sent_count
+      level: custom
+      description: Number of documents that would be sent
+      type: long
+
+    - name: metrics.diag_documents_volume.dns_events.suppressed_bytes
+      level: custom
+      description: Total size of suppressed documents
+      type: long
+
+    - name: metrics.diag_documents_volume.dns_events.suppressed_count
+      level: custom
+      description: Number of suppressed documents
+      type: long
+
+    - name: metrics.diag_documents_volume.overall.sent_bytes
+      level: custom
+      description: Total size of documents that would be sent
+      type: long
+
+    - name: metrics.diag_documents_volume.overall.sent_count
+      level: custom
+      description: Number of documents that would be sent
+      type: long
+
+    - name: metrics.diag_documents_volume.overall.suppressed_bytes
+      level: custom
+      description: Total size of suppressed documents
+      type: long
+
+    - name: metrics.diag_documents_volume.overall.suppressed_count
+      level: custom
+      description: Number of suppressed documents
+      type: long
+
+    - name: metrics.diag_documents_volume.process_events.sent_bytes
+      level: custom
+      description: Total size of documents that would be sent
+      type: long
+
+    - name: metrics.diag_documents_volume.process_events.sent_count
+      level: custom
+      description: Number of documents that would be sent
+      type: long
+
+    - name: metrics.diag_documents_volume.process_events.suppressed_bytes
+      level: custom
+      description: Total size of suppressed documents
+      type: long
+
+    - name: metrics.diag_documents_volume.process_events.suppressed_count
+      level: custom
+      description: Number of suppressed documents
+      type: long
+
+    - name: metrics.diag_documents_volume.process_events.sources
+      level: custom
+      type: object
+      description: An array of Process Event document statistics per source
+
+    - name: metrics.diag_documents_volume.process_events.sources.source
+      level: custom
+      type: keyword
+      description: Process Event document source name
+
+    - name: metrics.diag_documents_volume.process_events.sources.sent_count
+      level: custom
+      type: long
+      description: Number of Process Event documents from source that would be sent
+
+    - name: metrics.diag_documents_volume.process_events.sources.sent_bytes
+      level: custom
+      type: long
+      description: Total size of Process Event documents from source that would be sent
+
+    - name: metrics.diag_documents_volume.process_events.sources.suppressed_count
+      level: custom
+      type: long
+      description: Number of suppressed Process Event documents from source
+
+    - name: metrics.diag_documents_volume.process_events.sources.suppressed_bytes
+      level: custom
+      type: long
+      description: Total size of suppressed Process Event documents from source
+
+    - name: metrics.diag_documents_volume.alerts.sent_bytes
+      level: custom
+      description: Total size of documents that would be sent
+      type: long
+
+    - name: metrics.diag_documents_volume.alerts.sent_count
+      level: custom
+      description: Number of documents that would be sent
+      type: long
+
+    - name: metrics.diag_documents_volume.alerts.suppressed_bytes
+      level: custom
+      description: Total size of suppressed documents
+      type: long
+
+    - name: metrics.diag_documents_volume.alerts.suppressed_count
+      level: custom
+      description: Number of suppressed documents
+      type: long
+
+    - name: metrics.diag_documents_volume.api_events.sent_bytes
+      level: custom
+      description: Total size of documents that would be sent
+      type: long
+
+    - name: metrics.diag_documents_volume.api_events.sent_count
+      level: custom
+      description: Number of documents that would be sent
+      type: long
+
+    - name: metrics.diag_documents_volume.api_events.suppressed_bytes
+      level: custom
+      description: Total size of suppressed documents
+      type: long
+
+    - name: metrics.diag_documents_volume.api_events.suppressed_count
+      level: custom
+      description: Number of suppressed documents
+      type: long
+
+    - name: metrics.diag_documents_volume.diagnostic_alerts.sent_bytes
+      level: custom
+      description: Total size of documents that would be sent
+      type: long
+
+    - name: metrics.diag_documents_volume.diagnostic_alerts.sent_count
+      level: custom
+      description: Number of documents that would be sent
+      type: long
+
+    - name: metrics.diag_documents_volume.diagnostic_alerts.suppressed_bytes
+      level: custom
+      description: Total size of suppressed documents
+      type: long
+
+    - name: metrics.diag_documents_volume.diagnostic_alerts.suppressed_count
+      level: custom
+      description: Number of suppressed documents
+      type: long
+
+    - name: metrics.diag_documents_volume.file_events.sent_bytes
+      level: custom
+      description: Total size of documents that would be sent
+      type: long
+
+    - name: metrics.diag_documents_volume.file_events.sent_count
+      level: custom
+      description: Number of documents that would be sent
+      type: long
+
+    - name: metrics.diag_documents_volume.file_events.suppressed_bytes
+      level: custom
+      description: Total size of suppressed documents
+      type: long
+
+    - name: metrics.diag_documents_volume.file_events.suppressed_count
+      level: custom
+      description: Number of suppressed documents
+      type: long
+
+    - name: metrics.diag_documents_volume.library_events.sent_bytes
+      level: custom
+      description: Total size of documents that would be sent
+      type: long
+
+    - name: metrics.diag_documents_volume.library_events.sent_count
+      level: custom
+      description: Number of documents that would be sent
+      type: long
+
+    - name: metrics.diag_documents_volume.library_events.suppressed_bytes
+      level: custom
+      description: Total size of suppressed documents
+      type: long
+
+    - name: metrics.diag_documents_volume.library_events.suppressed_count
+      level: custom
+      description: Number of suppressed documents
+      type: long
+
+    - name: metrics.diag_documents_volume.network_events.sent_bytes
+      level: custom
+      description: Total size of documents that would be sent
+      type: long
+
+    - name: metrics.diag_documents_volume.network_events.sent_count
+      level: custom
+      description: Number of documents that would be sent
+      type: long
+
+    - name: metrics.diag_documents_volume.network_events.suppressed_bytes
+      level: custom
+      description: Total size of suppressed documents
+      type: long
+
+    - name: metrics.diag_documents_volume.network_events.suppressed_count
+      level: custom
+      description: Number of suppressed documents
+      type: long
+
+    - name: metrics.diag_documents_volume.registry_events.sent_bytes
+      level: custom
+      description: Total size of documents that would be sent
+      type: long
+
+    - name: metrics.diag_documents_volume.registry_events.sent_count
+      level: custom
+      description: Number of documents that would be sent
+      type: long
+
+    - name: metrics.diag_documents_volume.registry_events.suppressed_bytes
+      level: custom
+      description: Total size of suppressed documents
+      type: long
+
+    - name: metrics.diag_documents_volume.registry_events.suppressed_count
+      level: custom
+      description: Number of suppressed documents
+      type: long
+
+    - name: metrics.diag_documents_volume.security_events.sent_bytes
+      level: custom
+      description: Total size of documents that would be sent
+      type: long
+
+    - name: metrics.diag_documents_volume.security_events.sent_count
+      level: custom
+      description: Number of documents that would be sent
+      type: long
+
+    - name: metrics.diag_documents_volume.security_events.suppressed_bytes
+      level: custom
+      description: Total size of suppressed documents
+      type: long
+
+    - name: metrics.diag_documents_volume.security_events.suppressed_count
+      level: custom
+      description: Number of suppressed documents
+      type: long
+
     - name: metrics.documents_volume
       level: custom
       type: object