# No xpack monitoring for metricbeat

**URL:** https://discuss.elastic.co/t/no-xpack-monitoring-for-metricbeat/136573
**Category:** Beats
**Tags:** metricbeat
**Created:** [June 19, 2018, 9:12pm UTC](https://discuss.elastic.co/t/no-xpack-monitoring-for-metricbeat/136573 "2018-06-19T21:12:53Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [June 19, 2018, 9:12pm UTC](https://discuss.elastic.co/t/no-xpack-monitoring-for-metricbeat/136573/1 "2018-06-19T21:12:53Z")

</div>

I have enabled xpack monitoring in 6.3.0 in filebeat, auditbeat, and metricbeat. Security is disabled. filebeat and auditbeat show up just fine, metricbeat does not. metricbeat logs an error every 10 seconds

```
2018-06-19T17:04:12.958-0400 ERROR pipeline/output.go:92 Failed to publish events: 500 Internal Server Error: {"took":6,"ignored":false,"errors":true,"error":{"type":"export_exception","reason":"Exception when closing export bulk","caused_by":{"type":"export_exception","reason":"failed to flush export bulks","caused_by":{"type":"export_exception","reason":"bulk [default_local] reports failures when exporting documents","exceptions":[{"type":"export_exception","reason":"MapperParsingException[object mapping for [beats_stats.metrics.beat.cpu.user.time] tried to parse field [time] as object, but found a concrete value]","caused_by":{"type":"mapper_parsing_exception","reason":"object mapping for [beats_stats.metrics.beat.cpu.user.time] tried to parse field [time] as object, but found a concrete value"}}]}}}}

```

Am I missing an index template or something?

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [June 20, 2018, 2:27am UTC](https://discuss.elastic.co/t/no-xpack-monitoring-for-metricbeat/136573/2 "2018-06-20T02:27:31Z")

</div>

Are you are using version v6.3.0 all around (Metricbeat + Elasticsearch + Kibana)?

The v6.3.0 Beat's produce `beats_stats.metrics.beat.cpu.user.time.ms`. [source ref](https://github.com/elastic/beats/blob/v6.3.0/libbeat/cmd/instance/metrics.go#L105-L110)

And the Elasticsearch v6.3.0 [index template](https://github.com/elastic/elasticsearch/blob/v6.3.0/x-pack/plugin/core/src/main/resources/monitoring-beats.json#L73-L80) for Beat monitoring expects `time` to be an object with one field called `ms`.

---

<div class="post-metadata">

### Author: ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [June 20, 2018, 2:14pm UTC](https://discuss.elastic.co/t/no-xpack-monitoring-for-metricbeat/136573/3 "2018-06-20T14:14:16Z")

</div>

> [@andrewkroh](#):
>
> Are you are using version v6.3.0 all around (Metricbeat + Elasticsearch + Kibana)?

I would have sworn to this, but when I checked the elasticsearch logs to see how the bulk insert was failing I saw this.

"beat":{"type":"metricbeat","version":"6.2.4"

As soon as I updated the metricbeat to 6.3.0 it started reporting in correctly.

The .monitoring-beats-6-%{yyyy.MM.dd} index only has the major version in the name. Does that mean we cannot mix and match beats in the environment?

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [June 21, 2018, 9:53pm UTC](https://discuss.elastic.co/t/no-xpack-monitoring-for-metricbeat/136573/4 "2018-06-21T21:53:49Z")

</div>

> [@Badger](#):
>
> Does that mean we cannot mix and match beats in the environment?

You need to keep them on the same version for now. Hopefully as Beats monitoring becomes more stable there will be fewer changes and we can have broader compatibility. This version compat data is listed on the [support matrix](https://www.elastic.co/support/matrix).

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 19, 2018, 9:53pm UTC](https://discuss.elastic.co/t/no-xpack-monitoring-for-metricbeat/136573/5 "2018-07-19T21:53:59Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
