# Elasticsearch 5.6.9 and x-pack monitoring

**URL:** https://discuss.elastic.co/t/elasticsearch-5-6-9-and-x-pack-monitoring/195088
**Category:** Kibana
**Tags:** elastic-stack-monitoring
**Created:** [August 13, 2019, 7:26pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-9-and-x-pack-monitoring/195088 "2019-08-13T19:26:45Z")
**Posts on this page:** 11
**Page:** 2

<div class="post-metadata">

### Author: ![shradhatx](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shradhatx/32/45398_2.png) [@shradhatx](https://discuss.elastic.co/u/shradhatx)
#### Post date: [August 21, 2019, 6:17pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-9-and-x-pack-monitoring/195088/21 "2019-08-21T18:17:41Z")

</div>

@chrisronline xpack.monitoring.collection.enabled is not in ESv5

---

<div class="post-metadata">

### Author: ![chrisronline](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrisronline/32/28230_2.png) [@chrisronline](https://discuss.elastic.co/u/chrisronline)
#### Post date: [August 21, 2019, 6:30pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-9-and-x-pack-monitoring/195088/22 "2019-08-21T18:30:37Z")

</div>

My bad! But `xpack.monitoring.enabled` definitely is. Try enabling that

---

<div class="post-metadata">

### Author: ![shradhatx](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shradhatx/32/45398_2.png) [@shradhatx](https://discuss.elastic.co/u/shradhatx)
#### Post date: [August 21, 2019, 7:25pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-9-and-x-pack-monitoring/195088/23 "2019-08-21T19:25:25Z")

</div>

@chrisronline looks like you can have xpack.monitoring.enabled: true with xpack.monitoring.exporters.my\_remote setting I get an error-

Caused by: java.lang.IllegalStateException: settings object contains values for [host=["x.xx.xx.xx:9200"]] and [host.0=x.xx.xx.xx:9200]

Can you please confirm?

Is there anything in the log that indicates that monitoring exporters are set and their post status?

Is this correct setting -  
xpack.monitoring.exporters.my\_remote.type: http  
xpack.monitoring.exporters.my\_remote.host: ["xx.xx.xx.xx:9200"]

---

<div class="post-metadata">

### Author: ![shradhatx](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shradhatx/32/45398_2.png) [@shradhatx](https://discuss.elastic.co/u/shradhatx)
#### Post date: [August 26, 2019, 2:29pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-9-and-x-pack-monitoring/195088/24 "2019-08-26T14:29:44Z")

</div>

The setting on the cluster nodes being monitored as this is correct-  
xpack.monitoring.exporters.my\_remote.type: http  
xpack.monitoring.exporters.my\_remote.host: ["xx.xx.xx.xx:9200"]

@chrisronline the kibana(v6.8.1) dashboard is displaying that my license will expire in x days. If this has the Gold version features of multi-cluster monitoring and alerts then I understand but I do not see those features, so why is this license expiring?  
Secondly, how can I have a trial license to evaluate Gold features? How do I configure alerts. If you have a video explaining this can you send a link please?

---

<div class="post-metadata">

### Author: ![chrisronline](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrisronline/32/28230_2.png) [@chrisronline](https://discuss.elastic.co/u/chrisronline)
#### Post date: [August 26, 2019, 2:49pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-9-and-x-pack-monitoring/195088/25 "2019-08-26T14:49:12Z")

</div>

Hi @shradhatx

See here for starting a trial license: [https://www.elastic.co/guide/en/elasticsearch/reference/6.8/start-trial.html](https://www.elastic.co/guide/en/elasticsearch/reference/6.8/start-trial.html)

See here for alerts information: [https://www.elastic.co/guide/en/elastic-stack-overview/6.8/how-watcher-works.html](https://www.elastic.co/guide/en/elastic-stack-overview/6.8/how-watcher-works.html)

---

<div class="post-metadata">

### Author: ![shradhatx](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shradhatx/32/45398_2.png) [@shradhatx](https://discuss.elastic.co/u/shradhatx)
#### Post date: [August 28, 2019, 9:16pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-9-and-x-pack-monitoring/195088/26 "2019-08-28T21:16:25Z")

</div>

@chrisronline - Is there a way to turn on "spy" on monitoring dashboard? I want to utilize underlying queries to set up watcher.

---

<div class="post-metadata">

### Author: ![chrisronline](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrisronline/32/28230_2.png) [@chrisronline](https://discuss.elastic.co/u/chrisronline)
#### Post date: [August 29, 2019, 1:04pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-9-and-x-pack-monitoring/195088/27 "2019-08-29T13:04:26Z")

</div>

Unfortunately, not currently.

The data shown in the charts will always be sourced from Elasticseach, but some graphs do some post and pre-processing of the data that you'd need to mimic in order for the watch to operate on the same exact dataset as seen in the graphs.

It's fairly advanced and I'd recommend driving into the codebase and tracing through how a particular graph sources its data and that'll help get you started

---

<div class="post-metadata">

### Author: ![shradhatx](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shradhatx/32/45398_2.png) [@shradhatx](https://discuss.elastic.co/u/shradhatx)
#### Post date: [August 29, 2019, 2:47pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-9-and-x-pack-monitoring/195088/28 "2019-08-29T14:47:14Z")

</div>

@chrisronline - can you give me pointers please - when you say codebase where exactly is it?

---

<div class="post-metadata">

### Author: ![chrisronline](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrisronline/32/28230_2.png) [@chrisronline](https://discuss.elastic.co/u/chrisronline)
#### Post date: [August 29, 2019, 3:15pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-9-and-x-pack-monitoring/195088/29 "2019-08-29T15:15:14Z")

</div>

Let's look at an example.

Consider the `Search Rate` graph on the Elasticsearch overview page.

To start, we find the appropriate route that renders the data for this page. It's discoverable using the browser network developer tools. For this example, it's [this route](https://github.com/elastic/kibana/blob/master/x-pack/legacy/plugins/monitoring/server/routes/api/v1/elasticsearch/overview.js).

[This particular line](https://github.com/elastic/kibana/blob/master/x-pack/legacy/plugins/monitoring/server/routes/api/v1/elasticsearch/overview.js#L15) indices what set of metrics will be returned from this route, which are [defined here](https://github.com/elastic/kibana/blob/master/x-pack/legacy/plugins/monitoring/server/routes/api/v1/elasticsearch/metric_set_overview.js).

The first one looks right: `cluster_search_request_rate`.

Then, we [find the metric definition for that particular metric](https://github.com/elastic/kibana/blob/master/x-pack/legacy/plugins/monitoring/server/lib/metrics/elasticsearch/metrics.js#L119). Part of that definition includes the field from which the data is sourced, which in this case is: `indices_stats._all.total.search.query_total`.

But that's part of the battle.

Some of the collected metrics operate like counters, where they are ever increasing once the process starts. In these cases, we need to perform a little more work to calculate the data to show in the chart, specifically a derivative aggregation.

[The class definition for our metric](https://github.com/elastic/kibana/blob/master/x-pack/legacy/plugins/monitoring/server/lib/metrics/elasticsearch/classes.js#L144) indicates that it does indeed need a derivative applied.

Tracing even further into the code, [we can see how we use the result of the derivative aggregation](https://github.com/elastic/kibana/blob/master/x-pack/legacy/plugins/monitoring/server/lib/details/get_series.js#L190) instead of the raw value.

Another thing to consider is any custom pre or post processing happening with this metric.

[Look up the class definition for the metric](https://github.com/elastic/kibana/blob/master/x-pack/legacy/plugins/monitoring/server/lib/metrics/elasticsearch/classes.js#L140) and note any overridden `calculation` functionality. In this case, there is none, but some will and those calculations will need to be applied in any custom watch created.

Hope this helps!

---

<div class="post-metadata">

### Author: ![shradhatx](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shradhatx/32/45398_2.png) [@shradhatx](https://discuss.elastic.co/u/shradhatx)
#### Post date: [August 29, 2019, 7:11pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-9-and-x-pack-monitoring/195088/30 "2019-08-29T19:11:08Z")

</div>

@chrisronline thank you. This is very helpful. Appreciate very much your quick response!!

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 26, 2019, 7:11pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-9-and-x-pack-monitoring/195088/31 "2019-09-26T19:11:19Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

[Previous page](https://discuss.elastic.co/t/elasticsearch-5-6-9-and-x-pack-monitoring/195088.md?page=1)
