# Filebeat and Elasticsearch Notification

**URL:** <https://discuss.elastic.co/t/filebeat-and-elasticsearch-notification/361732>\
**Category:** Elasticsearch\
**Created:** [June 19, 2024, 1:21pm UTC](https://discuss.elastic.co/t/filebeat-and-elasticsearch-notification/361732 "2024-06-19T13:21:28Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Debasis\_Mallick](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/debasis_mallick/32/123723_2.png) [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\
**Post date:** [June 19, 2024, 1:21pm UTC](https://discuss.elastic.co/t/filebeat-and-elasticsearch-notification/361732/1 "2024-06-19T13:21:28Z")

</div>

Hi Team,

We had requirement that how the end user get notified in case the filebeat and Elasticsearch service get stopped.

Note:- Both is configured through `systemctl` process.

Thanks,  
Debasis

---

<div class="post-metadata">

**Author:** ![rtwolfe94022](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rtwolfe94022/32/132253_2.png) [@rtwolfe94022](https://discuss.elastic.co/u/rtwolfe94022)\
**Post date:** [June 19, 2024, 1:37pm UTC](https://discuss.elastic.co/t/filebeat-and-elasticsearch-notification/361732/2 "2024-06-19T13:37:40Z")

</div>

Official Elastic Search 8.14 Repo via JARaaS Hybrid RAG - Documentation - code current 6/19/2024 [AI Generated]

To notify users if the Filebeat and Elasticsearch services stop when configured through `systemctl`, you can use the `systemd` service unit configurations to set up service monitoring and notifications. Here are the steps you can follow:

1. **Ensure Startup Timeout is Adequate** :

2. **Configure Restart Options** :

3. **Set Up Notifications Using `systemd`** :

4. **Alternative Notification with Monitoring Tools** :

Here are the relevant references from internal documents:

Sources:

- Configuring Filebeat: configuring-filebeat.asciidoc (internal document)
- Systemd Startup Timeouts and Configuration: systemd.asciidoc (internal document)
- Watching the Status of Elasticsearch: example-watch-clusterstatus.asciidoc (internal document)

These configurations should help in setting up notifications for service stoppages.

---

<div class="post-metadata">

**Author:** ![Debasis\_Mallick](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/debasis_mallick/32/123723_2.png) [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\
**Post date:** [June 19, 2024, 2:02pm UTC](https://discuss.elastic.co/t/filebeat-and-elasticsearch-notification/361732/3 "2024-06-19T14:02:07Z")

</div>

@rtwolfe94022 Thanks for quick response. I will explore and update on this.

Thanks,  
Debasis

---

<div class="post-metadata">

**Author:** ![Debasis\_Mallick](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/debasis_mallick/32/123723_2.png) [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\
**Post date:** [June 21, 2024, 7:03am UTC](https://discuss.elastic.co/t/filebeat-and-elasticsearch-notification/361732/4 "2024-06-21T07:03:07Z")

</div>

@rtwolfe94022 After checking with customer, actually they want the SNMP alerts need to configure for Filebeat and Elasticsearch in case of any downtime.

Thanks,  
Debasis
