Monitoring Auditbeatedit
You can use the Elastic Stack monitoring features to gain insight into the health of Auditbeat instances running in your environment.
To monitor Auditbeat, make sure monitoring is enabled on your Elasticsearch cluster, then configure the method used to collect Auditbeat metrics. You can use one of following methods:
- Internal collection - Internal collectors send monitoring data directly to your monitoring cluster.
- Metricbeat collection - Metricbeat collects monitoring data from your Auditbeat instance and sends it directly to your monitoring cluster.
- Legacy internal collection (deprecated) - Legacy internal collectors send monitoring data to your production cluster.