Use internal collectors to send Beats monitoring data directly to your monitoring cluster.
To learn about monitoring in general, see Monitoring the Elastic Stack.
Create a user that has appropriate authority to send system-level monitoring
data to Elasticsearch. For example, you can use the built-in
beats_systemuser or assign the built-in
beats_systemrole to another user. For more information, see Setting Up User Authentication and Built-in Roles.
monitoringsettings in the Packetbeat configuration file. If you configured the Elasticsearch output and want to send Packetbeat monitoring events to the same Elasticsearch cluster, specify the following minimal configuration:
monitoring: enabled: true elasticsearch: username: beats_system password: somepassword
If you configured a different output, such as Logstash or you want to send Packetbeat monitoring events to a separate Elasticsearch cluster (referred to as the monitoring cluster), you must specify additional configuration options. For example:
- Start Packetbeat.
- View the monitoring data in Kibana.