The fields docker.network.out.bytes and docker.network.in.bytes are actually reporting the average number of bytes per seconds for the duration, but the docs state that they're totals. Some kind of total is what I intuitively would expect from the field names, but docs doesn't say if the totals are supposed to be totals since container or metricbeat started or if theyre the total amount since the previous value was reported.

For monitoring in Elastic Cloud we need the total amount transferred and estimating that based on average speed is cumbersome and error prone. Ideally we want the amount since the previous value.