# Beat and x-pack monitoring

**URL:** https://discuss.elastic.co/t/beat-and-x-pack-monitoring/182051
**Category:** Elasticsearch
**Tags:** elastic-stack-monitoring
**Created:** [May 21, 2019, 3:32pm UTC](https://discuss.elastic.co/t/beat-and-x-pack-monitoring/182051 "2019-05-21T15:32:03Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![franco.federico](https://avatars.discourse-cdn.com/v4/letter/f/67e7ee/32.png) [@franco.federico](https://discuss.elastic.co/u/franco.federico)
#### Post date: [May 21, 2019, 3:32pm UTC](https://discuss.elastic.co/t/beat-and-x-pack-monitoring/182051/1 "2019-05-21T15:32:03Z")

</div>

Hello

Is it possible to monitor the beat. I have a winlogbeat service on the DC and I'd like to know if this service goes down.

I know that winlogbeat send monitoring information, but in the monitor system I don't find it.

Could you help me?  
Thank you  
Franco

---

<div class="post-metadata">

### Author: ![Izek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/izek/32/37113_2.png) [@Izek](https://discuss.elastic.co/u/Izek)
#### Post date: [May 21, 2019, 3:45pm UTC](https://discuss.elastic.co/t/beat-and-x-pack-monitoring/182051/2 "2019-05-21T15:45:24Z")

</div>

1. use metricbeat to capture the winlogbeat service status. [https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-metricset-windows-service.html](https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-metricset-windows-service.html)
2. write watcher to check the status and generate alert if the status is down

---

<div class="post-metadata">

### Author: ![shaunak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaunak/32/6643_2.png) [@shaunak](https://discuss.elastic.co/u/shaunak)
#### Post date: [May 21, 2019, 3:50pm UTC](https://discuss.elastic.co/t/beat-and-x-pack-monitoring/182051/3 "2019-05-21T15:50:23Z")

</div>

What does your `winlogbeat.yml` look like? Specifically what do the `xpack.monitoring` settings in it look like? **Please mask any sensitive information before posting.**

> [@franco.federico](#):
>
> I know that winlogbeat send monitoring information, but in the monitor system I don't find it.

By "monitor system" are you referring to the Monitoring UI in Kibana? If so, what do you see there? Could you post some screenshots?

Finally, what is the result of the following Elasticsearch API call?

```auto
GET _cat/indices/.m*

```

---

<div class="post-metadata">

### Author: ![franco.federico](https://avatars.discourse-cdn.com/v4/letter/f/67e7ee/32.png) [@franco.federico](https://discuss.elastic.co/u/franco.federico)
#### Post date: [May 21, 2019, 5:20pm UTC](https://discuss.elastic.co/t/beat-and-x-pack-monitoring/182051/4 "2019-05-21T17:20:45Z")

</div>

![image](https://us1.discourse-cdn.com/elastic/original/3X/7/2/72ebb0a501688c47bc5349f26b9ada6c1c6b34eb.png)

This is X pack monitoring. I ask information how to add Beat section, and how to monitor beat in general.

I try to follow the road of [IzekChen](https://discuss.elastic.co/u/Izek).

Actually my xpack\_monitoring configuration is

```
#============================== Xpack Monitoring ===============================
# winlogbeat can export internal metrics to a central Elasticsearch monitoring
# cluster. This requires xpack monitoring to be enabled in Elasticsearch. The
# reporting is disabled by default.

# Set to true to enable the monitoring reporter.
#monitoring.enabled: false

# Uncomment to send the metrics to Elasticsearch. Most settings from the
# Elasticsearch output are accepted here as well.
# Note that the settings should point to your Elasticsearch *monitoring* cluster.
# Any setting that is not set is automatically inherited from the Elasticsearch
# output configuration, so if you have the Elasticsearch output configured such
# that it is pointing to your Elasticsearch monitoring cluster, you can simply
# uncomment the following line.
#monitoring.elasticsearch:

```

So [Shaunak Kashyap](https://discuss.elastic.co/u/shaunak) say me that only with deleting comment on this configuration section permits me to have a new section in the xpack monitoring, is it?

````
```
GET _cat/indices/.m*
```

green open .monitoring-alerts-6 3yrixubiTkW_oA5Ft3bL3A 1 1 1 0 12.5kb 6.2kb
green open .monitoring-kibana-6-2019.05.21 WCadbmwKTE-QZJcd7R-Pig 1 1 2074 0 2.2mb 1.1mb
green open .monitoring-es-6-2019.05.21 On2VvH5xQoSN0-VV1wjq3w 1 1 89400 1704 118.8mb 65.9mb

````

Thank you all  
Franco

---

<div class="post-metadata">

### Author: ![shaunak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaunak/32/6643_2.png) [@shaunak](https://discuss.elastic.co/u/shaunak)
#### Post date: [May 21, 2019, 5:54pm UTC](https://discuss.elastic.co/t/beat-and-x-pack-monitoring/182051/5 "2019-05-21T17:54:55Z")

</div>

In your `winlogbeat.yml`, can you set this and see if it helps?

```auto
monitoring.enabled: true

```

---

<div class="post-metadata">

### Author: ![franco.federico](https://avatars.discourse-cdn.com/v4/letter/f/67e7ee/32.png) [@franco.federico](https://discuss.elastic.co/u/franco.federico)
#### Post date: [May 27, 2019, 11:52am UTC](https://discuss.elastic.co/t/beat-and-x-pack-monitoring/182051/6 "2019-05-27T11:52:05Z")

</div>

I found the solution to my question and it is **Central Beats Managment**  
[https://www.elastic.co/guide/en/beats/filebeat/current/configuration-central-management.html](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-central-management.html)

Thank you all  
Franco

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 24, 2019, 11:52am UTC](https://discuss.elastic.co/t/beat-and-x-pack-monitoring/182051/7 "2019-06-24T11:52:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
