# Monitoring Logstash using Metricbeat

**URL:** <https://discuss.elastic.co/t/monitoring-logstash-using-metricbeat/277934>\
**Category:** Beats\
**Tags:** elastic-stack-monitoring, beats-module, metricbeat\
**Created:** [July 6, 2021, 8:52am UTC](https://discuss.elastic.co/t/monitoring-logstash-using-metricbeat/277934 "2021-07-06T08:52:04Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Farid\_N](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/farid_n/32/74144_2.png) [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\
**Post date:** [July 6, 2021, 8:52am UTC](https://discuss.elastic.co/t/monitoring-logstash-using-metricbeat/277934/1 "2021-07-06T08:52:04Z")

</div>

Hi  
I have a cluster with 4 nodes of Elasticsearch. 3 of them have Logstash and Metricbeat running for data ship and monitoring the pipelines and Logstash nodes.  
When I config the Metricbeat , I see **Pipelines** of 3 Logstash nodes in Kibana, but in **Nodes** I just see only one of the Logstash nodes...!!!

 ![Pipelines](https://us1.discourse-cdn.com/elastic/original/3X/8/7/87adf2334131ee9d5c786bf14eca1ee56197c7cb.jpeg)

 ![Node](https://us1.discourse-cdn.com/elastic/original/3X/6/1/61285efaed65e1169af86b85ad819faa376208e7.jpeg)

All 3 Metricbeat nodes:  
1- Enabled the logstash -xpack module  
2- Disabled the system module

My `metricbeat.yml` of each 3 nodes is:

```auto
metricbeat.config.modules:
path: ${path.config}/modules.d/*.yml
reload.enabled: false
setup.template.settings:
  index.number_of_shards: 1
  index.codec: best_compression
setup.dashboards.enabled: true
setup.kibana:
host: "172.22.33.11:5601"
output.elasticsearch:
hosts: ["localhost:9200"]
username: "my_user"
password: "my_password"
processors:
  - add_host_metadata: ~
  - add_cloud_metadata: ~
  - add_docker_metadata: ~
  - add_kubernetes_metadata: ~

```

And this is `logstash-xpack.yml` in `module.d`:

```auto
- module: logstash
  metricsets:
    - node
    - node_stats
  period: 10s
  hosts: ["localhost:9600"]
  username: "my_user"
  password: "my_password"
  xpack.enabled: true

```

Could you please help me how can I have all 3 Logstash nodes in **Stack Monitoring**?

Thank you

---

<div class="post-metadata">

**Author:** ![Mario\_Castro](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mario_castro/32/35107_2.png) [@Mario\_Castro](https://discuss.elastic.co/u/Mario_Castro)\
**Post date:** [July 22, 2021, 2:26pm UTC](https://discuss.elastic.co/t/monitoring-logstash-using-metricbeat/277934/2 "2021-07-22T14:26:26Z")

</div>

Hi, which versions are you using? I'm suspecting that there's some regression in Kibana in the latest versions. Can you check using a \< 7.13 version and report, please?

---

<div class="post-metadata">

**Author:** ![Farid\_N](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/farid_n/32/74144_2.png) [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\
**Post date:** [July 28, 2021, 7:04am UTC](https://discuss.elastic.co/t/monitoring-logstash-using-metricbeat/277934/3 "2021-07-28T07:04:25Z")

</div>

Thanks for response  
Here the version I'm using:  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/f/b/fb0cb744c7572c5bcb4cc7c76b8cee20bf638258.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 4, 2022, 8:31am UTC](https://discuss.elastic.co/t/monitoring-logstash-using-metricbeat/277934/4 "2022-11-04T08:31:23Z")

</div>