# Can't monitor Logstash with Metricbeat
**URL:** https://discuss.elastic.co/t/cant-monitor-logstash-with-metricbeat/249542
**Category:** Logstash
**Tags:** elastic-stack-monitoring
**Created:** [September 22, 2020, 3:03pm UTC](https://discuss.elastic.co/t/cant-monitor-logstash-with-metricbeat/249542 "2020-09-22T15:03:27Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@robertitox](https://discuss.elastic.co/u/robertitox)
#### Post date: [September 22, 2020, 3:03pm UTC](https://discuss.elastic.co/t/cant-monitor-logstash-with-metricbeat/249542/1 "2020-09-22T15:03:27Z")
Dear all, I have a 3-node Elasticsearch 7.9.1 cluster. In another server, I have a Logstash 7.9.1 service and Metricbeat with logstash-xpack module enable.
The problem is that in my Kibana --\> Stack Monitoring section, I can't see Logstash, entering Setup Mode I can see this:
Please, I show you my configurations in order to get your help:
_/etc/logstash/logstash.yml:_
path.data: /var/lib/logstash
pipeline.ordered: auto
config.debug: true
http.enabled: true
#HTTP API Settings
http.host: 127.0.0.1
http.port: 9601
#Metrics Settings
http.host: "127.0.0.1"
http.port: 9600
log.level: debug
path.logs: /var/log/logstash
monitoring.enabled: false
**/etc/metricbeat/metricbeat.yml:**
metricbeat.config.modules:
path: ${path.config}/modules.d/\*.yml
reload.enabled: true
reload.period: 60s
setup.template.settings:
index.number\_of\_shards: 1
index.codec: best\_compression
setup.kibana:
host: "[https://box1:5601](https://box1:5601)"
output.elasticsearch:
hosts: ["box1:9200", "box2:9200", "box3:9200"]
protocol: "https"
username: "elastic"
password: "xxx"
ssl.certificate\_authorities: ["/etc/ssl/certs/ca.crt"]
processors:
- add\_host\_metadata: ~
- add\_cloud\_metadata: ~
- add\_docker\_metadata: ~
- add\_kubernetes\_metadata: ~
monitoring.enabled: false
monitoring.elasticsearch:
**/etc/metricbeat/modules.d:**
- module: logstash
metricsets: ["node", "node\_stats"]
xpack.enabled: true
period: 10s
hosts: ["localhost:9600"]
Thanks a lot!!!
---
### Author:  [@chrisronline](https://discuss.elastic.co/u/chrisronline)
#### Post date: [September 29, 2020, 11:12am UTC](https://discuss.elastic.co/t/cant-monitor-logstash-with-metricbeat/249542/2 "2020-09-29T11:12:23Z")
Hi @robertitox,
Where are your logstash pipelines sending their data? Directly to Elasticsearch, or to another service?
---
### Author:  [@robertitox](https://discuss.elastic.co/u/robertitox)
#### Post date: [October 1, 2020, 1:02pm UTC](https://discuss.elastic.co/t/cant-monitor-logstash-with-metricbeat/249542/3 "2020-10-01T13:02:20Z")
Dear Chris, my logstash pipelines data are sent directly to Elasticsearch.
Thanks and I'll be wainting for your response.
Regards!!!
---
### Author:  [@chrisronline](https://discuss.elastic.co/u/chrisronline)
#### Post date: [October 1, 2020, 1:27pm UTC](https://discuss.elastic.co/t/cant-monitor-logstash-with-metricbeat/249542/4 "2020-10-01T13:27:00Z")
Great.
Two things to check:
1. On the machine running logstash, hit the `_node/stats?vertices=true` API for Logstash and return the full response
2. Run this query against the monitoring cluster
```auto
GET _cat/indices/.monitoring-*
```
If you see `.monitoring-logstash-*` indices in the list, then run this query and return the result:
```auto
POST .monitoring-logstash-*/_search
{
"size": 0,
"aggs": {
"clusters": {
"terms": {
"field": "cluster_uuid",
"size": 10
},
"aggs": {
"types": {
"terms": {
"field": "type",
"size": 10
},
"aggs": {
"first": {
"min": {
"field": "timestamp"
}
},
"last": {
"max": {
"field": "timestamp"
}
}
}
}
}
}
}
}
```
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 29, 2020, 1:27pm UTC](https://discuss.elastic.co/t/cant-monitor-logstash-with-metricbeat/249542/5 "2020-10-29T13:27:10Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.