Alerting on Filebeat


I want to enable alerting on Filebeat. I want to send a email or message whenever filebeat service stops. How can i achieve it without curator.


You could use metricbeat to monitor the process, and then if it doesn't show up alert on that.

Thank you for the response,
I am using free version of ES and i do not have xpack license to monitor the process. Is there any script or job i can run every 5 mins to check the process is running and send an email if service is stopped?

the best way and the easiest way to do is to use heartbeat to detect the availability of the endpoint filebeat and you alert when ever you receive down status

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.