# Microsoft windows clusters

**URL:** <https://discuss.elastic.co/t/microsoft-windows-clusters/289065>\
**Category:** Beats\
**Tags:** metricbeat\
**Created:** [November 12, 2021, 12:18pm UTC](https://discuss.elastic.co/t/microsoft-windows-clusters/289065 "2021-11-12T12:18:47Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![tractor\_boy](https://avatars.discourse-cdn.com/v4/letter/t/278dde/32.png) [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\
**Post date:** [November 12, 2021, 12:18pm UTC](https://discuss.elastic.co/t/microsoft-windows-clusters/289065/1 "2021-11-12T12:18:47Z")

</div>

I need to capture metrics that are clustered (microsoft windows), such that specific resources move when the cluster moves. Some resources stay on the node, other move between nodes as the cluster moves.

How are \*beats installed such that the host writes either the cluster name or the host name according to our capture requirements?

In the past I have installed multiple services- one configured on the cluster (so failover with the cluster) and one on each node, for node specific capture. Is this the required approach?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 14, 2021, 9:14pm UTC](https://discuss.elastic.co/t/microsoft-windows-clusters/289065/2 "2021-11-14T21:14:42Z")

</div>

As far as I know, most Beats will store the hostname of where it is running in the event.

---

<div class="post-metadata">

**Author:** ![tractor\_boy](https://avatars.discourse-cdn.com/v4/letter/t/278dde/32.png) [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\
**Post date:** [November 15, 2021, 8:23am UTC](https://discuss.elastic.co/t/microsoft-windows-clusters/289065/3 "2021-11-15T08:23:56Z")

</div>

Do you have any suggestions on how to resolve this limitation?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 13, 2021, 8:24am UTC](https://discuss.elastic.co/t/microsoft-windows-clusters/289065/4 "2021-12-13T08:24:00Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.