# Process Monitoring using Topbeat

**URL:** <https://discuss.elastic.co/t/process-monitoring-using-topbeat/77746>\
**Category:** Beats\
**Created:** [March 8, 2017, 1:54am UTC](https://discuss.elastic.co/t/process-monitoring-using-topbeat/77746 "2017-03-08T01:54:40Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![sam281](https://avatars.discourse-cdn.com/v4/letter/s/d78d45/32.png) [@sam281](https://discuss.elastic.co/u/sam281)\
**Post date:** [March 8, 2017, 1:54am UTC](https://discuss.elastic.co/t/process-monitoring-using-topbeat/77746/1 "2017-03-08T01:54:40Z")

</div>

Hi,

Can somebody throw some light on how to do process monitoring using topbeat and show it on dashboard highlighting the processes which are not running.

Thank you!  
Sam

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [March 11, 2017, 12:10am UTC](https://discuss.elastic.co/t/process-monitoring-using-topbeat/77746/2 "2017-03-11T00:10:56Z")

</div>

Topbeat has been replaced with Metricbeat. You can follow the [getting started guide](https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-getting-started.html) for Metricbeat to get up and running with sample dashboards showing data in Kibana.

I don't understand what you mean by highlighting processes that are not running? Do you mean you have a list of processes that you expect to be running and want to know when they are not present in the events being produced by Metricbeat?

---

<div class="post-metadata">

**Author:** ![sam281](https://avatars.discourse-cdn.com/v4/letter/s/d78d45/32.png) [@sam281](https://discuss.elastic.co/u/sam281)\
**Post date:** [March 13, 2017, 5:50am UTC](https://discuss.elastic.co/t/process-monitoring-using-topbeat/77746/3 "2017-03-13T05:50:28Z")

</div>

Hello Andrew,

Thanks for suggesting on Metricbeat.

Yes, I have a list of critical processes that I want to be always running and would like to show the status on the dashboards. When the process are not running I would like to send an email notification and update dashboard with a red(failed status) on the dashboard.

Any thoughts are really appreciated?

Thanks,  
Sam

![](https://us1.discourse-cdn.com/elastic/original/2X/f/f464dd1c7c382c015b3fc53eebe1cd1aadffee61.jpg)

---

<div class="post-metadata">

**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\
**Post date:** [March 15, 2017, 9:08pm UTC](https://discuss.elastic.co/t/process-monitoring-using-topbeat/77746/4 "2017-03-15T21:08:53Z")

</div>

I think you could use watcher for this and define a count query for the processes you want to have there. Query for the last 5 minutes and if there are no events for these processes, send and alert. This should work (didn't test).

---

<div class="post-metadata">

**Author:** ![sam281](https://avatars.discourse-cdn.com/v4/letter/s/d78d45/32.png) [@sam281](https://discuss.elastic.co/u/sam281)\
**Post date:** [March 15, 2017, 9:22pm UTC](https://discuss.elastic.co/t/process-monitoring-using-topbeat/77746/5 "2017-03-15T21:22:39Z")

</div>

Thank you!

Can you point me to some similar documentation please?

![](https://us1.discourse-cdn.com/elastic/original/2X/f/f464dd1c7c382c015b3fc53eebe1cd1aadffee61.jpg)

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [March 16, 2017, 3:43pm UTC](https://discuss.elastic.co/t/process-monitoring-using-topbeat/77746/6 "2017-03-16T15:43:54Z")

</div>

Alerting (formerly Watcher) is part of the X-Pack. You can find more info and docs (with some examples) here:

[https://www.elastic.co/products/x-pack/alerting](https://www.elastic.co/products/x-pack/alerting)

[https://www.elastic.co/guide/en/x-pack/current/watcher-getting-started.html](https://www.elastic.co/guide/en/x-pack/current/watcher-getting-started.html)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 13, 2017, 3:44pm UTC](https://discuss.elastic.co/t/process-monitoring-using-topbeat/77746/7 "2017-04-13T15:44:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
