# Agent status as a time series data

**URL:** <https://discuss.elastic.co/t/agent-status-as-a-time-series-data/241936>\
**Category:** Elasticsearch\
**Created:** [July 20, 2020, 9:59pm UTC](https://discuss.elastic.co/t/agent-status-as-a-time-series-data/241936 "2020-07-20T21:59:30Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![madhan\_dc](https://avatars.discourse-cdn.com/v4/letter/m/6a8cbe/32.png) [@madhan\_dc](https://discuss.elastic.co/u/madhan_dc)\
**Post date:** [July 20, 2020, 9:59pm UTC](https://discuss.elastic.co/t/agent-status-as-a-time-series-data/241936/1 "2020-07-20T21:59:30Z")

</div>

Newbie question. I am exploring elastic for our needs. We have a lot of filemonitor agents. these agents can go down sometimes and we want to monitor this via Kibana

my understanding, i need to save the status of the agent in a database/mongo etc., then continuously publish this data to elastic search in intervals of say 5 minutes or whatever, that way this becomes a timeseries data rather than just state data. Then when agent goes down and the database will have another value and that get published until status changes again in database.

is this the approach i should take to monitor state information. is there a better way. Is elk a good solution for this?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [July 20, 2020, 11:39pm UTC](https://discuss.elastic.co/t/agent-status-as-a-time-series-data/241936/2 "2020-07-20T23:39:10Z")

</div>

The Elastic Stack is a great solution to this, yes.

---

<div class="post-metadata">

**Author:** ![madhan\_dc](https://avatars.discourse-cdn.com/v4/letter/m/6a8cbe/32.png) [@madhan\_dc](https://discuss.elastic.co/u/madhan_dc)\
**Post date:** [July 21, 2020, 2:11am UTC](https://discuss.elastic.co/t/agent-status-as-a-time-series-data/241936/3 "2020-07-21T02:11:26Z")

</div>

thx. Is there a easy way to keep pumping same data to elasticsearch until a change happens?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [July 21, 2020, 2:12am UTC](https://discuss.elastic.co/t/agent-status-as-a-time-series-data/241936/4 "2020-07-21T02:12:15Z")

</div>

Where is the data being saved to now?

---

<div class="post-metadata">

**Author:** ![madhan\_dc](https://avatars.discourse-cdn.com/v4/letter/m/6a8cbe/32.png) [@madhan\_dc](https://discuss.elastic.co/u/madhan_dc)\
**Post date:** [July 21, 2020, 2:13am UTC](https://discuss.elastic.co/t/agent-status-as-a-time-series-data/241936/5 "2020-07-21T02:13:57Z")

</div>

This is a POC i am doing. Planning to save it mongodb and then pump it to elasticsearch

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [July 21, 2020, 2:15am UTC](https://discuss.elastic.co/t/agent-status-as-a-time-series-data/241936/6 "2020-07-21T02:15:56Z")

</div>

Why not just send it straight to Elasticsearch?

---

<div class="post-metadata">

**Author:** ![madhan\_dc](https://avatars.discourse-cdn.com/v4/letter/m/6a8cbe/32.png) [@madhan\_dc](https://discuss.elastic.co/u/madhan_dc)\
**Post date:** [July 21, 2020, 2:21am UTC](https://discuss.elastic.co/t/agent-status-as-a-time-series-data/241936/7 "2020-07-21T02:21:09Z")

</div>

i subscribe to agent events, those events can be many things. running no running is just one of the events. i was planning to store them in different collections in mongo and then feed time series version of them into elastic..

for example, number of files being monitored comes as an event message which i want to show as a graph as well. hoping i am makingset sense.

my question is how can i send same data over and over until state changes..is there an option in elastic to auto create previous value until new value comes in sort of config perhaps?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [July 21, 2020, 2:23am UTC](https://discuss.elastic.co/t/agent-status-as-a-time-series-data/241936/8 "2020-07-21T02:23:45Z")

</div>

For Elasticsearch you would just send each event as an individual time based event. Then go from there.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 18, 2020, 2:23am UTC](https://discuss.elastic.co/t/agent-status-as-a-time-series-data/241936/9 "2020-08-18T02:23:46Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
