Elasticsearch monitor with metricbeat

[elasticforme (Sachin)]

I am so crazy confuse on this setup. can't seems to make it work.

this is my test setup that I am trying and getting more confuse every min.

here is my configuration.

monitor cluster:: elkdev11
monitoring cluster: elkdevmon11

monitor cluster:
Metricbeat config file

   metricbeat.config.modules:
  path: ${path.config}/modules.d/*.yml  --> I only have only have elasticsearch-xpack.yml file here
  reload.enabled: false
setup.template.settings:
  index.number_of_shards: 1
  index.codec: best_compression
output.elasticsearch:
  hosts: ["elkdevmon11:9200"]
  username: "remote_monitoring_user"
  password: "remote"

module elasticsearch-xpack.html

- module: elasticsearch
  metricsets:
    - cluster_stats
    - index
    - index_recovery
    - index_summary
    - node_stats
    - shard
    - node
  xpack.enabled: true
  scope: node
  period: 60s
  hosts: ["http://elkdev11:9200"]
  username: "remote_monitoring_user"
  password: "remote"

once I do this I can see data coming in to elkdevmon11, I created data view and I can see proper data on discover tab as well.

but part I am confuse is how to go to kibana stack monitoring on elkdevmon11 and see this data. it is not working.

I want to use kibana on monitoring cluster.
here is kibana config - elkdevmon11
I know I am doing something wrong here.

server.port: 5601
server.host: "elkdevmon11"
server.name: "elkdevmon11"
elasticsearch.hosts: ["http://elkdevmon11:9200"]
elasticsearch.username: "kibana_system"
elasticsearch.password: "kibana"
xpack.fleet.agents.enabled: false
server.publicBaseUrl: http://elkdevmon11:5601
telemetry.optIn: false
monitoring.ui.ccs.enabled: false
monitoring.ui.enabled: true

What am I missing or misconfigure?

[stephenb (Stephen Brown)]

Did you run setup?

[elasticforme (Sachin)]

yes I have gone through document few time over. missing some name somewhere or has wrong name devmon11 to dev11.

I am getting all data in to monitoring cluster that part is working.

what setup are you referring to?

[elasticforme (Sachin)]

metricbeat modules enable elasticsearch-xpack
Module elasticsearch-xpack is already enabled

[elasticforme (Sachin)]

it is working.

while doing all this I had following in my elasticsearch.yml which I remove

xpack.monitoring.elasticsearch.collection.enabled