# Elasticsearch monitor with metricbeat

**URL:** https://discuss.elastic.co/t/elasticsearch-monitor-with-metricbeat/327223
**Category:** Elasticsearch
**Created:** [March 7, 2023, 7:08pm UTC](https://discuss.elastic.co/t/elasticsearch-monitor-with-metricbeat/327223 "2023-03-07T19:08:53Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![elasticforme](https://avatars.discourse-cdn.com/v4/letter/e/f05b48/32.png) [@elasticforme](https://discuss.elastic.co/u/elasticforme)
#### Post date: [March 7, 2023, 7:08pm UTC](https://discuss.elastic.co/t/elasticsearch-monitor-with-metricbeat/327223/1 "2023-03-07T19:08:53Z")

</div>

I am so crazy confuse on this setup. can't seems to make it work.

this is my test setup that I am trying and getting more confuse every min.

here is my configuration.

monitor cluster:: elkdev11  
monitoring cluster: elkdevmon11

monitor cluster:  
Metricbeat config file

```auto
   metricbeat.config.modules:
  path: ${path.config}/modules.d/*.yml --> I only have only have elasticsearch-xpack.yml file here
  reload.enabled: false
setup.template.settings:
  index.number_of_shards: 1
  index.codec: best_compression
output.elasticsearch:
  hosts: ["elkdevmon11:9200"]
  username: "remote_monitoring_user"
  password: "remote"

```

module elasticsearch-xpack.html

```auto
- module: elasticsearch
  metricsets:
    - cluster_stats
    - index
    - index_recovery
    - index_summary
    - node_stats
    - shard
    - node
  xpack.enabled: true
  scope: node
  period: 60s
  hosts: ["http://elkdev11:9200"]
  username: "remote_monitoring_user"
  password: "remote"

```

once I do this I can see data coming in to **elkdevmon11** , I created data view and I can see proper data on discover tab as well.

but part I am confuse is how to go to kibana stack monitoring on elkdevmon11 and see this data. it is not working.

I want to use kibana on monitoring cluster.  
here is kibana config - elkdevmon11  
I know I am doing something wrong here.

```auto
server.port: 5601
server.host: "elkdevmon11"
server.name: "elkdevmon11"
elasticsearch.hosts: ["http://elkdevmon11:9200"]
elasticsearch.username: "kibana_system"
elasticsearch.password: "kibana"
xpack.fleet.agents.enabled: false
server.publicBaseUrl: http://elkdevmon11:5601
telemetry.optIn: false
monitoring.ui.ccs.enabled: false
monitoring.ui.enabled: true

```

What am I missing or misconfigure?

---

<div class="post-metadata">

### Author: ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [March 7, 2023, 7:13pm UTC](https://discuss.elastic.co/t/elasticsearch-monitor-with-metricbeat/327223/2 "2023-03-07T19:13:26Z")

</div>

Did you run setup?

---

<div class="post-metadata">

### Author: ![elasticforme](https://avatars.discourse-cdn.com/v4/letter/e/f05b48/32.png) [@elasticforme](https://discuss.elastic.co/u/elasticforme)
#### Post date: [March 7, 2023, 7:17pm UTC](https://discuss.elastic.co/t/elasticsearch-monitor-with-metricbeat/327223/3 "2023-03-07T19:17:11Z")

</div>

yes I have gone through document few time over. missing some name somewhere or has wrong name devmon11 to dev11.

I am getting all data in to monitoring cluster that part is working.

what setup are you referring to?

---

<div class="post-metadata">

### Author: ![elasticforme](https://avatars.discourse-cdn.com/v4/letter/e/f05b48/32.png) [@elasticforme](https://discuss.elastic.co/u/elasticforme)
#### Post date: [March 7, 2023, 7:21pm UTC](https://discuss.elastic.co/t/elasticsearch-monitor-with-metricbeat/327223/4 "2023-03-07T19:21:15Z")

</div>

```auto
metricbeat modules enable elasticsearch-xpack
Module elasticsearch-xpack is already enabled

```

---

<div class="post-metadata">

### Author: ![elasticforme](https://avatars.discourse-cdn.com/v4/letter/e/f05b48/32.png) [@elasticforme](https://discuss.elastic.co/u/elasticforme)
#### Post date: [March 7, 2023, 7:26pm UTC](https://discuss.elastic.co/t/elasticsearch-monitor-with-metricbeat/327223/5 "2023-03-07T19:26:47Z")

</div>

it is working.

while doing all this I had following in my elasticsearch.yml which I remove

xpack.monitoring.elasticsearch.collection.enabled

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 4, 2023, 7:27pm UTC](https://discuss.elastic.co/t/elasticsearch-monitor-with-metricbeat/327223/6 "2023-04-04T19:27:34Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
