# Stack monitoring issues on single node cluster

**URL:** <https://discuss.elastic.co/t/stack-monitoring-issues-on-single-node-cluster/255355>\
**Category:** Beats\
**Tags:** elastic-stack-monitoring, metricbeat\
**Created:** [November 13, 2020, 2:36pm UTC](https://discuss.elastic.co/t/stack-monitoring-issues-on-single-node-cluster/255355 "2020-11-13T14:36:47Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![DanLS](https://avatars.discourse-cdn.com/v4/letter/d/e495f1/32.png) [@DanLS](https://discuss.elastic.co/u/DanLS)\
**Post date:** [November 13, 2020, 2:36pm UTC](https://discuss.elastic.co/t/stack-monitoring-issues-on-single-node-cluster/255355/1 "2020-11-13T14:36:48Z")

</div>

Hi, trying to set up node monitoring with metricbeat on a single node cluster (i know its best practise to have a monitoring node but this is just for testing etc) i've followed the install and looking at the logs it appears to be capturing data however no indexes are being created and data is not reaching kibana but i can't see any errors in logs to suggest that its failing to reach/contact

below is what journalctl is showing me

```auto
Nov 11 12:03:45 metricbeat[23957]: 2020-11-11T12:03:45.514Z INFO instance/beat.go:299 Setup Beat: metricbeat; Version: 7.9.3
Nov 11 12:03:45 metricbeat[23957]: 2020-11-11T12:03:45.514Z INFO [index-management] idxmgmt/std.go:184 Set output.elasticsearch.index to 'metricbeat-7.9.3' as ILM is enabled.
Nov 11 12:03:45 metricbeat[23957]: 2020-11-11T12:03:45.515Z INFO eslegclient/connection.go:99 elasticsearch url: https://localhost:9200
Nov 11 12:03:45 metricbeat[23957]: 2020-11-11T12:03:45.515Z INFO [publisher] pipeline/module.go:113 Beat name: bur-c1-n1
Nov 11 12:03:45 metricbeat[23957]: 2020-11-11T12:03:45.529Z INFO instance/beat.go:450 metricbeat start running.
Nov 11 12:03:45 metricbeat[23957]: 2020-11-11T12:03:45.529Z INFO [monitoring] log/log.go:118 Starting metrics logging every 30s
Nov 11 12:03:45 metricbeat[23957]: 2020-11-11T12:03:45.530Z INFO cfgfile/reload.go:164 Config reloader started
Nov 11 12:03:45 metricbeat[23957]: 2020-11-11T12:03:45.530Z INFO cfgfile/reload.go:224 Loading of config files completed.
Nov 11 12:03:48 metricbeat[23957]: 2020-11-11T12:03:48.513Z INFO [add_cloud_metadata] add_cloud_metadata/add_cloud_metadata.go:89 add_cloud_metadata: hosting provider type not detected.
Nov 11 12:04:15 metricbeat[23957]: 2020-11-11T12:04:15.531Z INFO [monitoring] log/log.go:145 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":70,"time":{"ms":70}},"total":{"ticks":160,"time":{"ms":168},"value":160},"user":{"ticks":90,"time":{"ms":98}}},"handles":{"limit":{"hard":524288,"soft":1024},"open":8},"info":{"ephemeral_id":"d20d7e00-8757-4de4-a3b8-65a869b7032c","uptime":{"ms":30098}},"memstats":{"gc_next":15086880,"memory_alloc":13069152,"memory_total":28510040,"rss":77127680},"runtime":{"goroutines":19}},"libbeat":{"config":{"module":{"running":0},"reloads":1,"scans":1},"output":{"type":"elasticsearch"},"pipeline":{"clients":0,"events":{"active":0}}},"system":{"cpu":{"cores":8},"load":{"1":0,"15":0.02,"5":0.04,"norm":{"1":0,"15":0.0025,"5":0.005}}}}}}

```

This is my elasticsearch-xpack.yml

```auto
    module: elasticsearch
    xpack.enabled: true
    period: 10s
    hosts: ["https://localhost:9200"]
    username: "elastic"
    password: " ************"
    ssl.enabled: true
    ssl.certificate: "/etc/elasticsearch/config/certs/fullchain.pem"
    ssl.key: "/etc/elasticsearch/config/certs/privkey.pem"
    ssl.verification_mode: "full"

```

and this is my metricbeat.yml

```auto
      output.elasticsearch:
      # Array of hosts to connect to.
      output.elasticsearch:
      hosts: ["https://localhost:9200"]

      # Protocol - either `http` (default) or `https`.
      protocol: "https"

      # Authentication credentials - either API key or username/password.
      #api_key: "id:api_key"
      username: "elastic"
      password: " ************"

```

---

<div class="post-metadata">

**Author:** ![abrx](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abrx/32/43881_2.png) [@abrx](https://discuss.elastic.co/u/abrx)\
**Post date:** [November 13, 2020, 3:00pm UTC](https://discuss.elastic.co/t/stack-monitoring-issues-on-single-node-cluster/255355/2 "2020-11-13T15:00:27Z")

</div>

Hi,  
Why do you use port 9300 ? It's usually use by elasticsearch for clustering purpose, by default API is exposed on 9200.  
Do you have any logs in elasticsearch side ?  
What's your [logging level](https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-module-elasticsearch.html#_example_configuration_17) ?

---

<div class="post-metadata">

**Author:** ![DanLS](https://avatars.discourse-cdn.com/v4/letter/d/e495f1/32.png) [@DanLS](https://discuss.elastic.co/u/DanLS)\
**Post date:** [November 13, 2020, 3:36pm UTC](https://discuss.elastic.co/t/stack-monitoring-issues-on-single-node-cluster/255355/3 "2020-11-13T15:36:32Z")

</div>

Ah that was a typo from me trying different things, should be 9200  
Logging level is debug and i cant see anything in the elasticsearch logs relating to it

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 16, 2020, 12:02am UTC](https://discuss.elastic.co/t/stack-monitoring-issues-on-single-node-cluster/255355/4 "2020-11-16T00:02:18Z")

</div>

What is the output from `_cat/indices?v` against Elasticsearch?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 14, 2020, 12:02am UTC](https://discuss.elastic.co/t/stack-monitoring-issues-on-single-node-cluster/255355/5 "2020-12-14T00:02:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
