# Network Interface Monitoring: interface Up/Down alert
**URL:** https://discuss.elastic.co/t/network-interface-monitoring-interface-up-down-alert/301767
**Category:** Beats
**Tags:** elastic-stack-alerting, metricbeat
**Created:** [April 6, 2022, 1:49pm UTC](https://discuss.elastic.co/t/network-interface-monitoring-interface-up-down-alert/301767 "2022-04-06T13:49:47Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@700grm](https://discuss.elastic.co/u/700grm)
#### Post date: [April 6, 2022, 1:49pm UTC](https://discuss.elastic.co/t/network-interface-monitoring-interface-up-down-alert/301767/1 "2022-04-06T13:49:47Z")
Hi, I'm new to Elastic. I'm looking into Beats agents for network interface monitoring: if the interface is up or down. However I don't see any relevant fields that can be used to do this job, I will appreciate any help.
---
### Author:  [@700grm](https://discuss.elastic.co/u/700grm)
#### Post date: [April 12, 2022, 12:50pm UTC](https://discuss.elastic.co/t/network-interface-monitoring-interface-up-down-alert/301767/2 "2022-04-12T12:50:50Z")
As this functionality is not provided by default in any beats agent, I've created a cronjob:
`/usr/sbin/ip link show | grep -v "lo:" | grep state | logger -p notice -t elastic`
that logs interface state; Filebeat forwards the logs to Elasticsearch and the alert is created based on the log:
Kibana Query Language:
`message : eth* eno* ens* and message : "state DOWN"`
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 10, 2022, 2:51pm UTC](https://discuss.elastic.co/t/network-interface-monitoring-interface-up-down-alert/301767/3 "2022-05-10T14:51:17Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.