# ELK 6.3 logstash not monitoring

**URL:** https://discuss.elastic.co/t/elk-6-3-logstash-not-monitoring/137512
**Category:** Logstash
**Created:** [June 26, 2018, 9:11pm UTC](https://discuss.elastic.co/t/elk-6-3-logstash-not-monitoring/137512 "2018-06-26T21:11:27Z")
**Posts on this page:** 12
**Page:** 1

<div class="post-metadata">

### Author: ![dalamar666](https://avatars.discourse-cdn.com/v4/letter/d/e9bcb4/32.png) [@dalamar666](https://discuss.elastic.co/u/dalamar666)
#### Post date: [June 26, 2018, 9:11pm UTC](https://discuss.elastic.co/t/elk-6-3-logstash-not-monitoring/137512/1 "2018-06-26T21:11:27Z")

</div>

I am unable to get monitoring to work on Logstash.

My logstash yml file  
xpack.security.enabled: false  
xpack.graph.enabled: true  
xpack.ml.enabled: true  
xpack.monitoring.enabled: true  
xpack.watcher.enabled: true  
xpack.monitoring.elasticsearch.url: ['[http://localhost:9200](http://localhost:9200)']  
xpack.reporting.enabled: true

My Elasticsearch yml

```
xpack.security.enabled: false
xpack.graph.enabled: true
xpack.ml.enabled: true
xpack.monitoring.enabled: true
xpack.watcher.enabled: true
action.auto_create_index: true
```

---

<div class="post-metadata">

### Author: ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)
#### Post date: [June 27, 2018, 1:21am UTC](https://discuss.elastic.co/t/elk-6-3-logstash-not-monitoring/137512/2 "2018-06-27T01:21:45Z")

</div>

Perhaps you could describe the symptoms of your problem for us so that we have something to go on.

---

<div class="post-metadata">

### Author: ![dalamar666](https://avatars.discourse-cdn.com/v4/letter/d/e9bcb4/32.png) [@dalamar666](https://discuss.elastic.co/u/dalamar666)
#### Post date: [June 27, 2018, 12:26pm UTC](https://discuss.elastic.co/t/elk-6-3-logstash-not-monitoring/137512/3 "2018-06-27T12:26:49Z")

</div>

The monitoring-logstash index is not being created and I am not able to monitor logstash in the monitoring area of Kibana.

---

<div class="post-metadata">

### Author: ![dalamar666](https://avatars.discourse-cdn.com/v4/letter/d/e9bcb4/32.png) [@dalamar666](https://discuss.elastic.co/u/dalamar666)
#### Post date: [June 27, 2018, 8:17pm UTC](https://discuss.elastic.co/t/elk-6-3-logstash-not-monitoring/137512/4 "2018-06-27T20:17:05Z")

</div>

I found this in my log and that makes no sense to me given the config.  
`Preformatted text`[2018-06-27T16:13:51,742][DEBUG][logstash.runner] xpack.monitoring.enabled: false  
[2018-06-27T16:13:51,742][DEBUG][logstash.runner] xpack.monitoring.elasticsearch.url: ["[http://localhost:9200](http://localhost:9200)"]  
[2018-06-27T16:13:51,742][DEBUG][logstash.runner] xpack.monitoring.collection.interval: 10000000000  
[2018-06-27T16:13:51,742][DEBUG][logstash.runner] xpack.monitoring.collection.timeout\_interval: 600000000000  
[2018-06-27T16:13:51,743][DEBUG][logstash.runner] xpack.monitoring.elasticsearch.username: "logstash\_system"  
[2018-06-27T16:13:51,743][DEBUG][logstash.runner] xpack.monitoring.elasticsearch.ssl.verification\_mode: "certificate"  
[2018-06-27T16:13:51,743][DEBUG][logstash.runner] xpack.monitoring.elasticsearch.sniffing: false  
[2018-06-27T16:13:51,743][DEBUG][logstash.runner] xpack.monitoring.collection.pipeline.details.enabled: true  
[2018-06-27T16:13:51,744][DEBUG][logstash.runner] xpack.monitoring.collection.config.enabled: true  
[2018-06-27T16:13:51,744][DEBUG][logstash.runner] node.uuid: ""  
'

---

<div class="post-metadata">

### Author: ![dalamar666](https://avatars.discourse-cdn.com/v4/letter/d/e9bcb4/32.png) [@dalamar666](https://discuss.elastic.co/u/dalamar666)
#### Post date: [June 28, 2018, 12:28pm UTC](https://discuss.elastic.co/t/elk-6-3-logstash-not-monitoring/137512/5 "2018-06-28T12:28:44Z")

</div>

Any ideas?

---

<div class="post-metadata">

### Author: ![dalamar666](https://avatars.discourse-cdn.com/v4/letter/d/e9bcb4/32.png) [@dalamar666](https://discuss.elastic.co/u/dalamar666)
#### Post date: [June 29, 2018, 5:27pm UTC](https://discuss.elastic.co/t/elk-6-3-logstash-not-monitoring/137512/6 "2018-06-29T17:27:42Z")

</div>

Bump. Hey Tim, any ideas???

---

<div class="post-metadata">

### Author: ![dalamar666](https://avatars.discourse-cdn.com/v4/letter/d/e9bcb4/32.png) [@dalamar666](https://discuss.elastic.co/u/dalamar666)
#### Post date: [July 2, 2018, 1:08pm UTC](https://discuss.elastic.co/t/elk-6-3-logstash-not-monitoring/137512/7 "2018-07-02T13:08:16Z")

</div>

Still looking for help

---

<div class="post-metadata">

### Author: ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)
#### Post date: [July 2, 2018, 1:55pm UTC](https://discuss.elastic.co/t/elk-6-3-logstash-not-monitoring/137512/8 "2018-07-02T13:55:40Z")

</div>

Please read this: [About the Elasticsearch category](https://discuss.elastic.co/t/about-the-elasticsearch-category/21), especially the "Also be patient" part. These forums are operated on a best efforts basis, with no commitment to response times.

The output from logstash doesn't concur with the configuration (logstash.yml) you have shared with us. How did you install logstash ( zip archive, deb/rpm , are you running on docker ? ) and what is the location of your `logstash.yml` file ?

---

<div class="post-metadata">

### Author: ![dalamar666](https://avatars.discourse-cdn.com/v4/letter/d/e9bcb4/32.png) [@dalamar666](https://discuss.elastic.co/u/dalamar666)
#### Post date: [July 2, 2018, 2:16pm UTC](https://discuss.elastic.co/t/elk-6-3-logstash-not-monitoring/137512/9 "2018-07-02T14:16:11Z")

</div>

ikakavas,

Thank you for the reply. I was worried that in the constant barrage of posts that my issue was lost.

I installed logstash through the repository. I am running ubuntu 16.04.  
My logstash.yml is located in the config directory of logstash. I have also verified it is looking there for the configurations in the service settings and startup.options.

---

<div class="post-metadata">

### Author: ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)
#### Post date: [July 3, 2018, 3:56am UTC](https://discuss.elastic.co/t/elk-6-3-logstash-not-monitoring/137512/10 "2018-07-03T03:56:11Z")

</div>

Are you running Elasticsearch 6.3 ?

Have you set `xpack.monitoring.collection.enabled: true` ?  
See: [https://www.elastic.co/guide/en/elasticsearch/reference/6.3/release-notes-6.3.0.html#breaking-6.3.0](https://www.elastic.co/guide/en/elasticsearch/reference/6.3/release-notes-6.3.0.html#breaking-6.3.0)

---

<div class="post-metadata">

### Author: ![dalamar666](https://avatars.discourse-cdn.com/v4/letter/d/e9bcb4/32.png) [@dalamar666](https://discuss.elastic.co/u/dalamar666)
#### Post date: [July 3, 2018, 12:09pm UTC](https://discuss.elastic.co/t/elk-6-3-logstash-not-monitoring/137512/11 "2018-07-03T12:09:19Z")

</div>

Tim,

Yes and yes. I have read through the breaking document and deleted the folders.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 31, 2018, 12:09pm UTC](https://discuss.elastic.co/t/elk-6-3-logstash-not-monitoring/137512/12 "2018-07-31T12:09:23Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
