Alert for Agent Offline/Server offline

Hi,

Could someone please help me to work out how to alert on whether an Agent is offline alternatively if a server is restarted or down?

Heartbeat is the obvious choice for Offline servers, but that's on the basis for another server monitoring it. This doesn't work on our network due to various lock downs.

I can have heartbeat do a local ICMP, but if the server is switched off the heartbeat status will always be UP as it hasn't received a 'down' doc as heartbeat isn't running.

I was thinking I could possibly use a doc count alert but the threshold could be different per server meaning i would need a watcher per server which is unfeasible for 200+ servers.

Does the beat central management offer a solution to alerting if a beat is offline?

Any thought/things to try would be appreciated.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Related: Elastic Fleet: Alert on Agent Status - #2 by jsanz