# How to Track Host Status (Healthy/Unhealthy)

**URL:** <https://discuss.elastic.co/t/how-to-track-host-status-healthy-unhealthy/370381>\
**Category:** Elastic Observability\
**Created:** [November 12, 2024, 10:25am UTC](https://discuss.elastic.co/t/how-to-track-host-status-healthy-unhealthy/370381 "2024-11-12T10:25:29Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![karakoz](https://avatars.discourse-cdn.com/v4/letter/k/a9a28c/32.png) [@karakoz](https://discuss.elastic.co/u/karakoz)\
**Post date:** [November 12, 2024, 10:25am UTC](https://discuss.elastic.co/t/how-to-track-host-status-healthy-unhealthy/370381/1 "2024-11-12T10:25:29Z")

</div>

Hello!

We are using Elastic Stack (ELK) to monitor our hosts, and we have around 465 hosts that need to be tracked by their status. We would like to understand how we can determine when hosts are not in the Healthy status in fleet. We are looking to write a rule for this. Could you please advise how to achieve this?

Thank you!

---

<div class="post-metadata">

**Author:** ![karakoz](https://avatars.discourse-cdn.com/v4/letter/k/a9a28c/32.png) [@karakoz](https://discuss.elastic.co/u/karakoz)\
**Post date:** [November 12, 2024, 11:23am UTC](https://discuss.elastic.co/t/how-to-track-host-status-healthy-unhealthy/370381/3 "2024-11-12T11:23:02Z")

</div>

I created the "Missing monitoring data" rule. Is everything set up correctly? I can see that there have been no logs from one host for 22 hours, but this rule has not triggered.

 ![2](https://us1.discourse-cdn.com/elastic/original/3X/6/3/635f44a367b69283d86c06279729d4aacfe7c208.png)

---

<div class="post-metadata">

**Author:** ![bhavyarm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhavyarm/32/22392_2.png) [@bhavyarm](https://discuss.elastic.co/u/bhavyarm)\
**Post date:** [November 12, 2024, 6:55pm UTC](https://discuss.elastic.co/t/how-to-track-host-status-healthy-unhealthy/370381/4 "2024-11-12T18:55:56Z")

</div>

Hello,

We have synthetics monitoring - built solution which should help you - [Synthetic monitoring | Elastic Observability [8.16] | Elastic](https://www.elastic.co/guide/en/observability/current/monitor-uptime-synthetics.html)

> **[Infrastructure Monitoring with Elastic Observability](https://www.elastic.co/observability/infrastructure-monitoring)**
>
> An open, extensible monitoring tool that ensures full visibility into your infrastructure. Collect important metrics, create dashboards, detect infrastructure problems....

Thanks,  
Bhavya

---

<div class="post-metadata">

**Author:** ![bhavyarm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhavyarm/32/22392_2.png) [@bhavyarm](https://discuss.elastic.co/u/bhavyarm)\
**Post date:** [November 12, 2024, 6:56pm UTC](https://discuss.elastic.co/t/how-to-track-host-status-healthy-unhealthy/370381/5 "2024-11-12T18:56:03Z")

</div>

From #Kibana to #Elastic Observability

---

<div class="post-metadata">

**Author:** ![karakoz](https://avatars.discourse-cdn.com/v4/letter/k/a9a28c/32.png) [@karakoz](https://discuss.elastic.co/u/karakoz)\
**Post date:** [November 13, 2024, 5:09am UTC](https://discuss.elastic.co/t/how-to-track-host-status-healthy-unhealthy/370381/6 "2024-11-13T05:09:16Z")

</div>

These hosts are workstations, and we are a SOC. Is there an alternative way we could set this up?

As you suggested I created 3 monitors. Can you check if I'm doing it right.  
I have to add all 465 hosts so it turns out? I can give the same settings to all 465 hosts except (Host, Monitor name).  
Here are my settings:

 ![Screenshot_1](https://us1.discourse-cdn.com/elastic/original/3X/b/1/b11b2c80413d66903174f82318ea16f5f76cb315.png)

---

<div class="post-metadata">

**Author:** ![karakoz](https://avatars.discourse-cdn.com/v4/letter/k/a9a28c/32.png) [@karakoz](https://discuss.elastic.co/u/karakoz)\
**Post date:** [November 13, 2024, 6:28am UTC](https://discuss.elastic.co/t/how-to-track-host-status-healthy-unhealthy/370381/7 "2024-11-13T06:28:25Z")

</div>

Here I've added a few hosts, all of which are working, but here they're listed as not working.

 ![photo_2024-11-13_15-11-32](https://us1.discourse-cdn.com/elastic/original/3X/c/f/cfd88be2c1ea804c42c4a192b12b5f4e2b94f32c.jpeg)
