# How to Monitor List of Host not reporting logs to elasticsearch?

**URL:** <https://discuss.elastic.co/t/how-to-monitor-list-of-host-not-reporting-logs-to-elasticsearch/136717>\
**Category:** Elasticsearch\
**Created:** [June 20, 2018, 2:46pm UTC](https://discuss.elastic.co/t/how-to-monitor-list-of-host-not-reporting-logs-to-elasticsearch/136717 "2018-06-20T14:46:41Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![addanuj](https://avatars.discourse-cdn.com/v4/letter/a/d2c977/32.png) [@addanuj](https://discuss.elastic.co/u/addanuj)\
**Post date:** [June 20, 2018, 2:46pm UTC](https://discuss.elastic.co/t/how-to-monitor-list-of-host-not-reporting-logs-to-elasticsearch/136717/1 "2018-06-20T14:46:42Z")

</div>

I need to monitor a List of Host [IP Address List] those are not reporting logs to elasticsearch,

please suggest a better way to achieve it. i just want to get an alert if any of the host "In a List" not sending logs to elasticsearch since 5 minute, Threshold watch do not allow me to define a List of IP address.

---

<div class="post-metadata">

**Author:** ![rcowart](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rcowart/32/88091_2.png) [@rcowart](https://discuss.elastic.co/u/rcowart)\
**Post date:** [June 20, 2018, 2:54pm UTC](https://discuss.elastic.co/t/how-to-monitor-list-of-host-not-reporting-logs-to-elasticsearch/136717/2 "2018-06-20T14:54:11Z")

</div>

Since you mention watches I am guessing that you have X-Pack. Do you have X-Pack ML available? Such a job should be able to be configured with ML.

At one of my projects in the IoT space we ingest data into Kafka before it makes it to Elasticsearch. A Kafka streams apps is used to detect sensors that have gone silent and provide alerting. This same method can be easily applied to logs.

Depending on your architecture there could be multiple options.

---

<div class="post-metadata">

**Author:** ![addanuj](https://avatars.discourse-cdn.com/v4/letter/a/d2c977/32.png) [@addanuj](https://discuss.elastic.co/u/addanuj)\
**Post date:** [June 20, 2018, 2:58pm UTC](https://discuss.elastic.co/t/how-to-monitor-list-of-host-not-reporting-logs-to-elasticsearch/136717/3 "2018-06-20T14:58:12Z")

</div>

Hi Robert,

I have X-Pack but do not have ML in my subscription Licence. please suggest something if i can do with watcher. right now i am trying a simple "terms" query but not able to return specific value for which query do not finds logs.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 18, 2018, 2:58pm UTC](https://discuss.elastic.co/t/how-to-monitor-list-of-host-not-reporting-logs-to-elasticsearch/136717/4 "2018-07-18T14:58:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.