# Monitoring elasticsearch when using xpack

**URL:** <https://discuss.elastic.co/t/monitoring-elasticsearch-when-using-xpack/91883>\
**Category:** Elasticsearch\
**Created:** [July 5, 2017, 11:15am UTC](https://discuss.elastic.co/t/monitoring-elasticsearch-when-using-xpack/91883 "2017-07-05T11:15:09Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![lowlevelio](https://avatars.discourse-cdn.com/v4/letter/l/ea666f/32.png) [@lowlevelio](https://discuss.elastic.co/u/lowlevelio)\
**Post date:** [July 5, 2017, 11:15am UTC](https://discuss.elastic.co/t/monitoring-elasticsearch-when-using-xpack/91883/1 "2017-07-05T11:15:09Z")

</div>

What's the best url for monitoring of elasticsearch's http endpoint? (In this case I'm using heartbeat). The root? When using elasticsearch with xpack, i.e. when elasticsearch requires a login, what rights should a monitoring user/role have?

---

<div class="post-metadata">

**Author:** ![nrichers](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nrichers/32/17801_2.png) [@nrichers](https://discuss.elastic.co/u/nrichers)\
**Post date:** [July 7, 2017, 8:27pm UTC](https://discuss.elastic.co/t/monitoring-elasticsearch-when-using-xpack/91883/2 "2017-07-07T20:27:23Z")

</div>

Hiya @lowlevelio,

Are you using Elastic Cloud Enterprise? If so, the Cloud UI provides a direct link to the logs for each Elasticsearch cluster, among others. See [https://www.elastic.co/guide/en/cloud-enterprise/current/ece-monitoring-ece-access.html](https://www.elastic.co/guide/en/cloud-enterprise/current/ece-monitoring-ece-access.html) for more info. There should not be anything that you set up separately.

If you are not using ECE (or Elastic Cloud for that matter) and set up Heartbeat yourself, then this post likely belongs into a different forum, e.g. Beats or X-Pack. I can ask to have it moved there, so that you can get the right answers. There's some related info for our Elastic Cloud hosted service [that might help](https://www.elastic.co/guide/en/cloud/current/security.html#security-filebeat-example) set up the right kind of user, but again it is geared towards Cloud  
users.)

Nik

---

<div class="post-metadata">

**Author:** ![lowlevelio](https://avatars.discourse-cdn.com/v4/letter/l/ea666f/32.png) [@lowlevelio](https://discuss.elastic.co/u/lowlevelio)\
**Post date:** [July 7, 2017, 11:21pm UTC](https://discuss.elastic.co/t/monitoring-elasticsearch-when-using-xpack/91883/3 "2017-07-07T23:21:03Z")

</div>

1. Yes, I'm "only" using x-pack, you can move this thread to the appropriate forum.
2. Thanks for your answer, though I already got an answer from your pay-support for this issue.
3. Initially I was thinking of monitoring the \_cluster/health page, but due to heartbeat isn't able to parse the returned json, or even save it anywhere, I will use alerting instead.

---

<div class="post-metadata">

**Author:** ![nrichers](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nrichers/32/17801_2.png) [@nrichers](https://discuss.elastic.co/u/nrichers)\
**Post date:** [July 8, 2017, 12:15am UTC](https://discuss.elastic.co/t/monitoring-elasticsearch-when-using-xpack/91883/4 "2017-07-08T00:15:47Z")

</div>

Hi @lowlevelio,

Glad you got it sorted! If you have your answer, then this thread probably doesn't need to move.

Nik

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 22, 2017, 12:15am UTC](https://discuss.elastic.co/t/monitoring-elasticsearch-when-using-xpack/91883/5 "2017-07-22T00:15:49Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.