Monitor all http requests

[nikosd23 (Nikolaos Dimos)]

Hello,

We want to monitor all http requests to our cluster. We have enabled kibana monitoring. Is there documentation about this? A use would be to check the the client is using preemptive auth and doesn't issue duplicate requests all the time.

[LeeDr (Lee Drengenberg)]

Hi Nikolaos,

Sounds like maybe you would want to install and run packetbeat? https://www.elastic.co/products/beats/packetbeat
You might need to run it on each node in your cluster.. Depends on your network topology.

Regards,
Lee

[jaymode (Jay Modi)]

You can also make use of the auditing feature in X-Pack Security. This will audit the requests and you can also enable logging of request bodies.

[bohyun (Bohyun Kim)]

Hi @nikosd23

@nikosd23

We want to monitor all http requests to our cluster. We have enabled kibana monitoring. Is there documentation about this

Currently, our X-Pack monitoring for Kibana is intended for Kibana server monitoring only (introduced in 5.0) but we are planning to expand on the scope of Kibana monitoring to include metrics like http requests to the ES cluster.

Thanks,
Bohyun