# Monitoring Logstash with X-Pack Not Working

**URL:** <https://discuss.elastic.co/t/monitoring-logstash-with-x-pack-not-working/76700>\
**Category:** Logstash\
**Created:** [February 27, 2017, 10:04pm UTC](https://discuss.elastic.co/t/monitoring-logstash-with-x-pack-not-working/76700 "2017-02-27T22:04:53Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![mrmt](https://avatars.discourse-cdn.com/v4/letter/m/4491bb/32.png) [@mrmt](https://discuss.elastic.co/u/mrmt)\
**Post date:** [February 27, 2017, 10:04pm UTC](https://discuss.elastic.co/t/monitoring-logstash-with-x-pack-not-working/76700/1 "2017-02-27T22:04:53Z")

</div>

Saw this blogpost: [Monitoring Logstash Filters: X-ray glasses included | Elastic Blog](https://www.elastic.co/blog/monitoring-logstash-filters) and decided to give it a try.  
I installed the X-Pack plugin on my single Logstash node (5.2.1), added the following to my yaml:

> xpack.monitoring.elasticsearch.url: "[https://blahblah:9243](https://blahblah:9243)"  
> xpack.monitoring.elasticsearch.username: "user"  
> xpack.monitoring.elasticsearch.password: "password"

Then I restarted Logstash. Logstash went back to processing, logs for Logstash showed no errors. However, no monitoring never showed up in the Elasticsearch cluster. Not even seeing any monitoring indices created.

Tried changing the user I made to "super\_user" role just to see if it was permissions. No change.

Extras:  
Elasticsearch (Elastic Cloud): 5.2.1  
Kibana (Elastic Cloud): 5.2.1

Any ideas?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [February 28, 2017, 12:16am UTC](https://discuss.elastic.co/t/monitoring-logstash-with-x-pack-not-working/76700/2 "2017-02-28T00:16:10Z")

</div>

Can you curl the ES node using that URL + auth details?

---

<div class="post-metadata">

**Author:** ![mrmt](https://avatars.discourse-cdn.com/v4/letter/m/4491bb/32.png) [@mrmt](https://discuss.elastic.co/u/mrmt)\
**Post date:** [February 28, 2017, 12:27am UTC](https://discuss.elastic.co/t/monitoring-logstash-with-x-pack-not-working/76700/3 "2017-02-28T00:27:49Z")

</div>

Yeah, it's actually the same login and cluster that Logstash is using in the pipeline to write events to Elasticsearch. And that part is working so I know the username/password is good.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 28, 2017, 12:28am UTC](https://discuss.elastic.co/t/monitoring-logstash-with-x-pack-not-working/76700/4 "2017-03-28T00:28:15Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.