# Alert for Agent Offline/Server offline

**URL:** <https://discuss.elastic.co/t/alert-for-agent-offline-server-offline/235151>\
**Category:** Kibana\
**Tags:** elastic-stack-monitoring, elastic-stack-alerting\
**Created:** [June 1, 2020, 11:14am UTC](https://discuss.elastic.co/t/alert-for-agent-offline-server-offline/235151 "2020-06-01T11:14:05Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![spike83](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spike83/32/47036_2.png) [@spike83](https://discuss.elastic.co/u/spike83)\
**Post date:** [June 1, 2020, 11:14am UTC](https://discuss.elastic.co/t/alert-for-agent-offline-server-offline/235151/1 "2020-06-01T11:14:05Z")

</div>

Hi,

Could someone please help me to work out how to alert on whether an Agent is offline alternatively if a server is restarted or down?

Heartbeat is the obvious choice for Offline servers, but that's on the basis for another server monitoring it. This doesn't work on our network due to various lock downs.

I can have heartbeat do a local ICMP, but if the server is switched off the heartbeat status will always be UP as it hasn't received a 'down' doc as heartbeat isn't running.

I was thinking I could possibly use a doc count alert but the threshold could be different per server meaning i would need a watcher per server which is unfeasible for 200+ servers.

Does the beat central management offer a solution to alerting if a beat is offline?

Any thought/things to try would be appreciated.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 29, 2020, 11:14am UTC](https://discuss.elastic.co/t/alert-for-agent-offline-server-offline/235151/2 "2020-06-29T11:14:06Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

---

<div class="post-metadata">

**Author:** ![xeraa](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/xeraa/32/48181_2.png) [@xeraa](https://discuss.elastic.co/u/xeraa)\
**Post date:** [May 29, 2023, 5:02pm UTC](https://discuss.elastic.co/t/alert-for-agent-offline-server-offline/235151/3 "2023-05-29T17:02:22Z")

</div>

Related: [Elastic Fleet: Alert on Agent Status - #2 by jsanz](https://discuss.elastic.co/t/elastic-fleet-alert-on-agent-status/333502/2)