# Monitoring Log Activity into Logstash **URL:** \ **Category:** Logstash\ **Created:** [January 6, 2016, 10:50am UTC](https://discuss.elastic.co/t/monitoring-log-activity-into-logstash/38493 "2016-01-06T10:50:49Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Ben19](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ben19/32/3745_2.png) [@Ben19](https://discuss.elastic.co/u/Ben19)\ **Post date:** [January 6, 2016, 10:50am UTC](https://discuss.elastic.co/t/monitoring-log-activity-into-logstash/38493/1 "2016-01-06T10:50:49Z")
Hi, I’m looking for a way to alert ourselves when we are either not receiving logs into logstash or the logs received are not being sent to ES. I could come up with some O/S ways in Linux like inotifywait and maybe some bash scripts that could watch a number of ELK files but I’m wanting to know what is the best practice for doing this with the ELK stack. Ideally I’d like to receive an email alert if no logs have been received or they are not being sent to ES. Thanks ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [January 6, 2016, 11:21am UTC](https://discuss.elastic.co/t/monitoring-log-activity-into-logstash/38493/2 "2016-01-06T11:21:11Z")
You can probably use [Watcher](https://www.elastic.co/products/watcher) for this. Another option is to have Logstash ping [Lovebeat](https://github.com/boivie/lovebeat) for some or all events, and Lovebeat will fire an alert when the rate drops below a threshold. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 5:16am UTC](https://discuss.elastic.co/t/monitoring-log-activity-into-logstash/38493/3 "2017-07-06T05:16:40Z")